Red Team Apocalypse - Beau Bullock and Derek Banks

Explore advanced red team techniques and methodologies in this 45-minute conference talk from BSides Tampa 2018. Delve into topics such as Google Calendar Event Injection, Business Email Capture, Unicode Domain Names, and Domain Fronting. Learn about Network Access Control (NAC) Bypass, PowerUp SQL, and stealthy host/domain enumeration. Gain insights on solid systems administration practices and enforcing good user behavior. Compare red team approaches to traditional penetration testing and understand the evolution from the original Pentest Apocalypse to the Red Team Apocalypse. Conclude with a summary of key takeaways and recommendations for improving organizational security posture.

Team Apocalypse
Original Pentest Apocalypse
Red Team vs Pen Test
Red Team Methodology
Google Calendar Event Injection
Business Email Capture
Unicode Domain Names
Domain Fronting
NAC Bypass
PowerUp SQL
Stealthy Host/Domain Enumeration
Solid Systems Administration
Enforce Good User Behavior
Summary and Conclusions