Tag: exfiltration

  • This one time, at Defcon… (a blast from the past)

    Wow, there’s a blog here… Lucky for me there are other people who write new content that somehow relates to this blog so I have a chance to point to them and say “cool stuff, look there!”. My good friend Itzik Kotler has just written a blog post about bypassing DLP systems using some of…

  • Advanced Data Exfiltration – full paper

    This paper has been published in several security conferences during 2011, and is now being made fully available (as well as a PDF version for downloading)   Abstract Penetration testing and red-team exercises have been running for years using the same methodology and techniques. Nevertheless, modern attacks do not conform to what the industry has…

  • the art of not thinking about elephants

    Approaching risk management should be done in the most holistic manner, this means that EVERY aspect of information flow should be taken into account. This article describes how a red-team test managed to exfiltrate data out of a closed/non-connected network using innovative thinking.