I Am Security

Tag: exfiltration

  • This one time, at Defcon… (a blast from the past)

    —

    by

    iamit
    in

    Wow, there’s a blog here… Lucky for me there are other people who write new content that somehow relates to this blog so I have a chance to point to them and say “cool stuff, look there!”. My good friend Itzik Kotler has just written a blog post about bypassing DLP systems using some of…

  • Advanced Data Exfiltration – full paper

    —

    by

    iamit
    in

    This paper has been published in several security conferences during 2011, and is now being made fully available (as well as a PDF version for downloading)   Abstract Penetration testing and red-team exercises have been running for years using the same methodology and techniques. Nevertheless, modern attacks do not conform to what the industry has…

  • the art of not thinking about elephants

    —

    by

    iamit
    in

    Approaching risk management should be done in the most holistic manner, this means that EVERY aspect of information flow should be taken into account. This article describes how a red-team test managed to exfiltrate data out of a closed/non-connected network using innovative thinking.