Conquer the Enterprise from Inside
summary
Advocates show that small on-site pentest dropboxes lower cost and simulate assume breach internal attacks using common hardware (Raspberry Pi, Pineapple, Packet Squirrel, Intel NUC) and radio dongles. Demonstrations include a working Twitter/Facebook C2 for command-and-control, RF discovery with kismet mapping Bluetooth/Wi‑Fi/433–915 MHz devices, and a live Mouse hijack via Crazyradio injecting rubber‑ducky payloads. Attack toolchain uses bettercap, RTL‑SDR/crazyradio, Kali tools, and commodity hardware costing $50–$400, and real-world finds include devices in racks and bank fraud.
AI-written summary · about
chapters (10)
- 0:00Introduction and background
- 3:02Pen testing boxes approach
- 8:04Real-world dox box cases
- 12:44Types of penetration boxes
- 16:39Weaponizing dox boxes
- 19:31Demo: Social media C2
- 22:51Demo: Wireless scanning
- 24:45Demo: Mousejack attack
- 26:52Conclusion and resources
- 27:37Q&A session
related talks
41mJust Another Live Hacking - How Insecure Is Secure Enough?
29mFrom pocket to Pwn: How we hacked a multinational Corp for $200 with... (Tim Shipp)
01h 01mA security tester's toolkit
01h 00mA Security Tester's Toolbox
13mFreedom of Security
33mHacked on National Television
59mWireless security testing with attack
01h 06mHow hacking works