Discover and read the best of Twitter Threads about #PurpleTeams
Most recents (1)
Now that my health is stable again, I will be resuming the development of the #Hephaestus project with a few new additions I would like to share.
For those who missed it the Hephaestus project was originally presented at #Hushcon in 2017: github.com/glinares/Offic…
For those who missed it the Hephaestus project was originally presented at #Hushcon in 2017: github.com/glinares/Offic…
Microsoft in the last year has done quite a few great features to enhance Office security and the overall posture of Office based exploits seem to be lower than a year ago.
However with this I am pivoting a bit on how #Hephaestus will be used and leveraged in #Redteam events
However with this I am pivoting a bit on how #Hephaestus will be used and leveraged in #Redteam events
#Hephaestus will be a 2nd phase tool that will allow an operator to exploit a system using Microsoft Office components as sort of a puppet. Think of how many tools use Powershell in order to compromise systems and stay persistent and gather system info.
