Prebellico 100 Perfect Passive Pre-engagement/Post Compromise
100% passive intelligence gathering on internal networks using weak assumptions about target environment.
Summary
Internal Network Intelligence
When attacking modern internal networks, intelligence determines success. Understanding the environment prevents missing targets of opportunity.
Passive Information Gathering
Obtaining stealthy environment information in mature environments is difficult. Even in overt engagements, limited time windows create challenges.
Assumptions
Internal testing often operates on incorrect assumptions about switched networks. These assumptions drive engagement methods but may be wrong.
Prebellico Framework
Prebellico enables pre-engagement and post-compromise intelligence gathering through 100% passive methods using minimal resources. It gathers information about system intent, internal address space, hostnames, egress filtering, TCP trust relationships, and open ports through passive reverse port scanning techniques.
Related talks
Main Stage·42 min
Simple Nomad
Simple Nomad explores a how-to regarding network mapping at DEF CON 8, examining network-mapping and practical defenses.
Recon Village·21 min
Caleb Madrigal
WiFi network mapping tool showing all connected devices and enabling bandwidth monitoring and device detection.
TROOPERS IT Security Conference·22 min
Industry experts analyze emerging threats surrounding TR18/NGI18: Advances in IPv6 Network Reconnaissance.