A C2 Story – Outlook's One-Setting Wonder
DESCRIPTION
In this session, I am sharing an exciting story from the world of red team operations at TrustedSec. The story covers how we turned a simple registry tweak in Outlook and made a powerful Command and Control (C2) framework. This tool became essential in our operations against companies for initial access.
I will walk you through how we researched and developed this tool, showing the steps involved in creating a specialized C2 framework. This framework has been an important part of our toolkit for the last three years, helping us successfully navigate various challenging engagements.
Another unique thing about this session is that we're not just talking about our work; we're also sharing our internal C2 framework with the community. This tool will most likely be released during Black Hat / Defcon 2024.
WHY THE COMMITTEE CHOSE THIS TALK
This talk is made for anyone interested in cybersecurity, whether you're a seasoned professional or just starting out. I aim to provide insights that are not only informative but also practical, offering a useful tool packed with modules that you can explore and learn from.
SPEAKER
