Command and Control Courses and Certifications

Security BSides San Francisco

So You Think You Can Secure Your Cloud - Red Team Engagements in GCP

Comprehensive guide to adversary simulations in GCP, covering initial access, persistence, privilege escalation, C2 using Google products, and data exfiltration techniques.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

BruCON Security Conference

Reinvestigating PowerShell Attacks

Explore the evolution of PowerShell attacks, offensive techniques, and defensive strategies since 2014, including insights on Desired State Configuration for covert persistence and command and control.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

BSidesLV

Abusing Webhooks for Command and Control

Explore techniques for exploiting webhooks as command and control channels in cybersecurity. Learn about potential vulnerabilities and defensive strategies.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Ekoparty Security Conference

Windows Agentless C2 - Abusing the MDM Client Stack

Unveils innovative research on exploiting Windows MDM stack for agentless C2 systems. Explores vulnerabilities, custom C2 server creation, and remote device control techniques, inspiring new defensive strategies.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Leverage Recorded Future Playbooks to Automatically Integrate Threat Intelligence with Microsoft Azure

Automate threat intelligence integration in Microsoft Azure using Recorded Future Playbooks for enhanced detection, enrichment, and prevention in Sentinel and Defender ATP.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Weaponizing Splunk - Using Blue Teams for Evil

Explore how attackers can exploit Splunk for malicious purposes, including data extraction and command control, in this eye-opening cybersecurity presentation.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Honey I Stole Your C2 Server - A Dive into Attacker Infrastructure

Explore attacker infrastructure through a Mandiant investigation, covering Metasploit indicators, command and control, encoding, and insights into attacker techniques and tools.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Disrupting the Killchain

Explore cybersecurity strategies to disrupt attack killchains, covering reconnaissance, exploitation, and command & control phases with practical defensive measures and tools.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Black Hat

Circumventing the Guardians - How the Security Features in State-of-the-Art TLS Inspection Solutions Can Be Exploited for Covert Data Exfiltration

Unveiling a stealthy data exfiltration method that bypasses TLS inspection security solutions. Learn about SNIcat and how it circumvents perimeter defenses, with insights on mitigation and detection strategies.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Black Hat

Game of Chromes - Owning the Web with Zombie Chrome Extensions

Explore how malicious Chrome extensions can create botnets, distribute themselves, and exploit vulnerabilities. Learn about attack patterns, extension capabilities, and security measures.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Black Hat

DSCompromised - A Windows DSC Attack Framework

Explore a PowerShell toolkit leveraging Windows Desired State Configuration for command-and-control, malware persistence, and automatic re-infection. Learn attack techniques and defensive strategies.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

OWASP Foundation

ClickOnce Exploitation: One-Click Network Foothold - AppSec California 2016

Explore ClickOnce deployment vulnerabilities and learn a new methodology for establishing network footholds through minimal user interaction and phishing techniques.

• YouTube
• 40 minutes
• On-Demand
• Free Video

OWASP Foundation

DIY Command and Control for Fun and No Profit

Hands-on exploration of Command & Control botnets, providing insight into cybercriminal operations. Includes live malware demonstration for a realistic glimpse into this dark corner of the internet.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Free Video

BruCON Security Conference

Improving Cyber Resilience Through Micro Attack Simulations

Innovative Micro Attack Simulations approach for validating specific security controls, enhancing cyber resilience through targeted assessments of technical and non-technical aspects, demonstrated with a ransomware attack case study.

• YouTube
• 50 minutes
• On-Demand
• Free Video

BruCON Security Conference

CommandGPT: Using ChatGPT for C2 and Post-Exploitation - Lecture 13

Explore CommandGPT's potential in offensive security, leveraging AI for dynamic code generation in command and control frameworks and simulating ransomware techniques.

• YouTube
• 40 minutes
• On-Demand
• Free Video