~/talk

OSINT to Compromise

Talkat OWASP Global AppSec Virtual 2020 · 2020-10-22..10-23· [security]
links:none on file
slides:none on file

Demonstrates an end-to-end OSINT-to-compromise pipeline that moves from Lockheed Martin kill chain recon to exfiltration, showing concrete tools and artifacts: Maltego for harvesting emails, Sherlock for username enumeration, and an evil.pdf created with Metasploit via the Social-Engineer Toolkit hosted on a cloud LHOST. Shows delivery options, USB drops and spearphish ruses, and measures success by C2 callbacks, endpoint/DLP detection, and which device (phone, laptop, tablet) opened the message.

AI-written summary · about

  1. 0:00Start
  2. 0:36LOCKHEED MARTIN KILL CHAIN
  3. 1:05USING OSINT TOOLS
  4. 1:52END TO END PROCESS
  5. 4:59MALTECO DEMO: COMPANY STALKER
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.