The Subtle Crab: Writing Offensive Tools in Rust | Michael Taggart | Offensive Con 2023
/// 🔗 Register for webcasts, summits, and workshops -
https://poweredbybhis.com
With more threat actors embracing ""exotic"" programming languages for their payloads, red team operators would be well-advised to develop tooling that emulates this technique. Rust, although a challenging language to get started with, is an appealing choice for offensive tooling due to its flexibility and excellent bindings to the Windows API.
This talk will discuss how to get started with Rust for offensive tool creation, my experiences building a Rust C2 (OffensiveNotion), and what else is possible for Rustacean red teamers.
/// 📄 View Our Live Training Course Calendarhttps://www.antisyphontraining.com/tr...
/// 📄 Pay-What-You-Can Course Cataloghttps://www.antisyphontraining.com/pa...
/// 📄 On-Demand Training Course Cataloghttps://www.antisyphontraining.com/on...
/// 📄 Antisyphon Training Roadmaphttps://www.antisyphontraining.com/tr...
///Antisyphon Socials
Twitter: / antisy_training
Mastodon: https://infosec.exchange/@Antisy_Trai...
LinkedIn: / antisyphon-training
Discord: / discord
///Antisyphon Training
Pay What You Can: https://www.antisyphontraining.com/pa...
Live Training: https://www.antisyphontraining.com/tr...
On Demand Training: https://www.antisyphontraining.com/on...
///Antisyphon Shirts
https://spearphish-general-store.mysh...
///Educational Infosec Content
Black Hills Infosec YouTube: / blackhillsinformationsecurity
Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/
Wild West Hackin' Fest YouTube: / wildwesthackinfest
Active Countermeasures YouTube: / activecountermeasures
///Backdoors & Breaches - Incident Response Card Game
Backdoors & Breaches: https://www.backdoorsandbreaches.com/
Play B&B Online: https://play.backdoorsandbreaches.com
Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/
#bhis #antisyphon #infosec #CyberSecurity #training
///Chapters
01:13 - Why I like Rust
03:15 - OffensiveNotion INTRO
05:30 - OffensiveNotion DEMO
08:40 - Rust True/False
09:55 - Rust can make you a better programmer
12:08 - Cross-compilation INTRO
14:48 - Cross, conditional compilation DEMOS
17:37 - LitCrypt
18:50 - RustyNeedle INTRO
19:04 - BASE64 vs Windows Defender
20:21 - RustyNeedle DEMO
21:49 - XLL - DLLs for Excel
23:50 - Delete VSCs
25:30 - ON PortScanner, tokio
27:30 - Getting started with Rust
28:26 - taggartinstitute.org - Free education resource