Initial Compromise Through Web Side: Alternative Vectors Beyond Simple RCE
Walter Cuestas demonstrates three real-world case studies of achieving initial enterprise access through web vulnerabilities without relying on direct RCE.
Summary
Web Applications as Primary Initial Access Vectors
While phishing and client-side attacks are prevalent, web-facing applications remain an indispensable gateway for red teams targeting corporate perimeters.
Exploring Complex Web Vulnerability Chains
Walter Cuestas details three real-world attack scenarios where subtle web flaws were chained to breach internal networks without classic unauthenticated RCE.
Weaponizing SSRF, XXE, and Deserialization Flaws
The speaker illustrates exploiting Server-Side Request Forgery (SSRF) to access cloud metadata and abusing XML External Entity (XXE) injection for internal port scanning.
Bridging Web Compromise to Internal Network Pivoting
The presentation provides red and blue teams with insights into how web flaws translate into internal network footholds and lateral movement.
Related talks
NahamSec·42 min
Learning Server Side Request Forgery (SSRF) Basics Using Portswigger's Web Security Academy.
Main Stage·44 min
Nick Powers · Steven Flores
Nick Powers and Steven Flores show how Microsoft ClickOnce technology can be abused for stealthy phishing initial access, bypassing Mark-of-the-Web and AppLocker.
Main Stage·52 min
Cedric Owens
Cedric Owens details modern attack paths in non-Active Directory macOS environments, including Gatekeeper bypasses, cloud IdaaS targeting, and post-exploitation tradecraft.