Next Generation Red Teaming
Talkat AppSec California 2014 · on Tuesday, 2014-01-28· at 14:00· Track 3, Annenberg Community Beach House, East Pacific Coast Highway·
summary
Claims that siloed red teams miss app-layer risk and shows an application-centric method that actually combines components into composites. Demonstrates a real exploit chain: cross-site scripting across subdomains that grabs a cookie scoped to the parent domain, rewrites login pages with JavaScript, posts credentials to an attacker server, and uses VPN auth to reach internal apps. Attack executes at scale — hundreds of credentials in 30 minutes — proving the approach works.
AI-written summary · about
chapters (19)
- 0:00Intro
- 1:34Agenda
- 3:45What Is Red Teaming?
- 8:03Basic Elements Of A Red Team
- 8:46Electronic
- 9:33Social
- 9:53Physical
- 11:38Other Activities
- 15:46Traditional Assessment Process
- 17:38Why Is This Flawed?
- 18:55Point In Time Risk Reliance Scenario
- 20:59Setting Up A Successful Red Team
- 26:46Threat Modeling And Threat Analysis
- 30:03Business Goals And Risks
- 31:24The Software Attack Surface
- 33:07High Risk Of Low Risk Applications
- 39:41Composite Attack Scenario
- 39:55Why Bother?
- 43:24Scalability
related talks
12mIntroduction To Red Team Tooling And Opsec
40mFantastic Red-Team Attacks and How to Find Them
30mTales of Red Teaming
39mRed Teaming from outside: Identifying and exploiting SaaS systems... (Rojan Rijal)
49mStories from the trenches - How a red team exercise gained full control of a client network
34mPurple Team Strategies for Application Security
47mPenetration Testing & Red Teaming for Healthcare
54mHacked in hours: Red team assessments unveiling vulnerabilities