Mike Felch | Modern Red Team Weaponization | WWHF Deadwood 2020
Join the WWHF Community Discord: / discord
00:00 - Chief Breaking Officer
01:57 - FEATURE PRESENTATION: Modern Red Team Weaponization
03:25 - Automated Tool Deployment
23:50 - C2 Integration
30:04 - Payloads, Payloads, & Payloads
39:21 - DEMO: Trustmole
52:50 - Wrap It All Up
In an effort to seamlessly equip operators and reduce leaving breadcrumbs, this presentation will walk through methods for modern red team weaponization of offsec tooling. First we will step through the build process which will include automated builds, continuous integration/deployment, and C2 framework integration. Next, we will step through OPSEC considerations for payloads and tooling in an effort to reduce the breadcrumbs being left behind from assemblies. Finally, we will take a look at payload tradecraft for calling managed code (C# tooling) from unmanaged C++ (stub/launchers), low-level syscalls using C#, and code execution leveraging the Windows kernel.