Sign up to save your podcasts
Or
Share #S03EP08 Getting Domain Admin: Infrastructure Hacking | Prashant Mahajan
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
#S03EP08 Getting Domain Admin: Infrastructure Hacking | Prashant Mahajan
Guest: Prashant Mahajan, Director for Payatu Australia Pty Ltd and OzHack
The Cybersecurity landscape is driven by the increasing complexity and integration of systems. One major challenge is the proliferation of interconnected devices and platforms, which expand the attack surface and create numerous entry points for malicious actors. Additionally, the rapid adoption of cloud services and virtualization technologies introduces new vulnerabilities and requires robust security measures that are often inadequately implemented.
Furthermore, the rise of sophisticated attack techniques, such as advanced persistent threats (APTs) and zero-day exploits, further complicates the defense mechanisms needed to protect infrastructure. Addressing these challenges requires a multi-faceted approach, including advanced threat detection, continuous monitoring, and enhanced collaboration across the cybersecurity community.
In this episode we explore this through some very interesting stories from Prashant M. What can really go wrong in our IT infra and how attackers can leverage our assumptions.
Recommended reading/viewing for practitioners:
ADRecon:
- https://github.com/adrecon/ADRecon
- https://github.com/adrecon/AzureADRecon
- https://www.defcon.org/html/defcon-26/dc-26-demolabs.html
- https://www.blackhat.com/us-18/arsenal/schedule/index.html#adrecon-active-directory-recon-11912
A few recommended books for getting into Pen Testing:
- The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws
- The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities
- Network Security Assessment: Know Your Network
- Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks by Michal Zalewski
- Tangled Web: A Guide to Securing Modern Web Applications by Michal Zalewski
- Black Hat Python, 2nd Edition: Python Programming for Hackers and Pentesters by Justin Seitz and Tim Arnold
- The Hacker Playbook 3: Practical Guide To Penetration Testing
Follow us on LinkedIn: https://www.linkedin.com/company/breakpoint-security-podcast
Audio on Buzzsprout: https://breakpoint.buzzsprout.com
If you like to see more like this, please Subscribe to Breakpoint Youtube!
Please Share with others in the community. It always means a lot!
Follow us on LinkedIn: @breakpoint-security-podcast
Audio on Buzzsprout: https://breakpoint.buzzsprout.com
Buzz me on Twitter or LinkedIn Connect with me on -
- Twitter: @NeeluTripathy
- LinkedIn: @neelutripathy
View all episodes
By Neelu TripathyGuest: Prashant Mahajan, Director for Payatu Australia Pty Ltd and OzHack
The Cybersecurity landscape is driven by the increasing complexity and integration of systems. One major challenge is the proliferation of interconnected devices and platforms, which expand the attack surface and create numerous entry points for malicious actors. Additionally, the rapid adoption of cloud services and virtualization technologies introduces new vulnerabilities and requires robust security measures that are often inadequately implemented.
Furthermore, the rise of sophisticated attack techniques, such as advanced persistent threats (APTs) and zero-day exploits, further complicates the defense mechanisms needed to protect infrastructure. Addressing these challenges requires a multi-faceted approach, including advanced threat detection, continuous monitoring, and enhanced collaboration across the cybersecurity community.
In this episode we explore this through some very interesting stories from Prashant M. What can really go wrong in our IT infra and how attackers can leverage our assumptions.
Recommended reading/viewing for practitioners:
ADRecon:
- https://github.com/adrecon/ADRecon
- https://github.com/adrecon/AzureADRecon
- https://www.defcon.org/html/defcon-26/dc-26-demolabs.html
- https://www.blackhat.com/us-18/arsenal/schedule/index.html#adrecon-active-directory-recon-11912
A few recommended books for getting into Pen Testing:
- The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws
- The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities
- Network Security Assessment: Know Your Network
- Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks by Michal Zalewski
- Tangled Web: A Guide to Securing Modern Web Applications by Michal Zalewski
- Black Hat Python, 2nd Edition: Python Programming for Hackers and Pentesters by Justin Seitz and Tim Arnold
- The Hacker Playbook 3: Practical Guide To Penetration Testing
Follow us on LinkedIn: https://www.linkedin.com/company/breakpoint-security-podcast
Audio on Buzzsprout: https://breakpoint.buzzsprout.com
If you like to see more like this, please Subscribe to Breakpoint Youtube!
Please Share with others in the community. It always means a lot!
Follow us on LinkedIn: @breakpoint-security-podcast
Audio on Buzzsprout: https://breakpoint.buzzsprout.com
Buzz me on Twitter or LinkedIn Connect with me on -
- Twitter: @NeeluTripathy
- LinkedIn: @neelutripathy