About: Satyam is Independent Security Researcher who has a great interest in both sides of the Security. His forte is to see the whole scenario in the wild from a threat actor perspective. Being Silent and performing operation covertly is the area which he likes the most when he stays on the attack surface. His eyes are always on the emerging technology that is heavily deployed in the enterprise.

Workshop title: Advance Red Team Attacks

Abstract: The Workshop will be delivered to make the audience aware of the Emerging Advance Red Team Attacks. As we all know that the 92-95% of Fortune companies use Active Directory to manage their IT infrastructure due to which the APT Threat actor has wide Attack Surface Area to attack the Infrastructure. The possible outcomes of these attacks carried out by the threat actor may result in important data exfiltration and much more. These Attack can be first simulation by the Red Team in the Infrastructure to know the possible attack Tactics, Techniques, and Procedures (TTP) that can mimic the adversaries. Red Teaming is the best way to test the security of the infrastructure against the apex/advance threat actors. Therefore any company needs to adapt the Red Teaming Methodology to secure its infrastructure against the attackers. The phases in the workshop will be completely based on the Assumed breach methodology by Microsoft. The Session will follow the MITRE ATT&CK fashion to attack the Active Directory Premises which will give the audience a gist of what attacks can be carried out by any red teamer in the wild. The attacks will be demonstrated in a story format and the destination will be to the Domain Controller. The workshop will not only demonstrate the simulation of the attacks but also provide the lab which will mimic the Real-world Infrastructure of a company. InfoSec enthusiast who wants to sharpen their Red Team Skills, and who wants to explore the APT Threat Actor approach, “Advance Red Team Attacks” is the session for you. Last but not least, we will also discuss the defense of the attacks in the Enterprise. Note that the workshop is not meant for the Beginners in the Cyber Security Field. At the end of the Workshop, the lab manual will be provided which will act as a guide to the demonstration

About: Yash is a freelance security researcher having deep interest in discovering new TTP’s & learning about the dark secrets of Active Directory. Yash holds industry level certifications like CCNA Cyber-Ops, CEH v9. His main focus is on framing offensive & defensive pentesting strategies for sophisticated environment & Red teaming Active Directory.

Workshop title: Advance Red Team Attacks

Abstract: The Workshop will be delivered to make the audience aware of the Emerging Advance Red Team Attacks. As we all know that the 92-95% of Fortune companies use Active Directory to manage their IT infrastructure due to which the APT Threat actor has wide Attack Surface Area to attack the Infrastructure. The possible outcomes of these attacks carried out by the threat actor may result in important data exfiltration and much more. These Attack can be first simulation by the Red Team in the Infrastructure to know the possible attack Tactics, Techniques, and Procedures (TTP) that can mimic the adversaries. Red Teaming is the best way to test the security of the infrastructure against the apex/advance threat actors. Therefore any company needs to adapt the Red Teaming Methodology to secure its infrastructure against the attackers. The phases in the workshop will be completely based on the Assumed breach methodology by Microsoft. The Session will follow the MITRE ATT&CK fashion to attack the Active Directory Premises which will give the audience a gist of what attacks can be carried out by any red teamer in the wild. The attacks will be demonstrated in a story format and the destination will be to the Domain Controller. The workshop will not only demonstrate the simulation of the attacks but also provide the lab which will mimic the Real-world Infrastructure of a company. InfoSec enthusiast who wants to sharpen their Red Team Skills, and who wants to explore the APT Threat Actor approach, “Advance Red Team Attacks” is the session for you. Last but not least, we will also discuss the defense of the attacks in the Enterprise. Note that the workshop is not meant for the Beginners in the Cyber Security Field. At the end of the Workshop, the lab manual will be provided which will act as a guide to the demonstration

About: Savan Gadhiya is working as a Senior Security Consultant at NotSoSecure. He completed his masters in IT Systems and Network Security in 2013. He has more than 5 years of experience in IT Security and total 8 years of experience in Information Technology.

Workshop title: Dive into Server-Side Request Forgery

Abstract: This workshop will be covering the Server-Side Request Forgery(SSRF) attacks:

• Basics of SSRF
• Identifying SSRF Sink
• Exploiting SSRF
• Leveraging various URL schemes
• Bypassing SSRF filters
• Real-time attack scenarios
• Exploiting SSRF in the era of cloud
• Defense against SSRF
• Case Studies

• The attendees will understand SSRF attacks
• The attendees will understand the process of identifying SSRF attacks
• The attendees will understand on how they could exploit SSRF vulnerabilities
• The attendees will be able to know how to implement fixes for SSRF vulnerabilities

About: Manish Gupta is a Cyber Security Analyst at Societe Generale in India. Where he specializes in Offensive Security and Red Teaming Activities on Banking Environment. A part-time Bug Bounty Hunter and CTF Player. His Research interest includes Real World Cyber Attack Simulation and Advanced persistent Threat (APT). He currently working on developing Open-Source Offensive Security Toolkit which helps Red Teamers / Penetration Testers.

Talk title: PivotSuite: Hack The Hidden Network - A Network Pivoting Toolkit

Abstract: PivotSuite is a portable, platform independent and powerful network pivoting toolkit, Which helps Red Teamers / Penetration Testers to use a compromised system to move around inside a network. It is a Standalone Utility, Which can use as a Server or as a Client.

• PivotSuite as a Server : If the compromised host is directly accessable (Forward Connection) from Our pentest machine, Then we can run pivotsuite as a server on compromised machine and access the different subnet hosts from our pentest machine, Which was only accessable from compromised machine.
• PivotSuite as a Client : If the compromised host is behind a Firewall / NAT and isn't directly accessable from our pentest machine, Then we can run pivotsuite as a server on pentest machine and pivotsuite as a client on compromised machine for creating a reverse tunnel (Reverse Connection). Using this we can reach different subnet hosts from our pentest machine, which was only accessable from compromised machine.

About: Pranav Hivarekar is a Founder at Peritus InfoSec and an active bug hunter, he has been helping companies improve their security from past three years by finding high severe vulnerabilities in their products. He has been listed in top 25 white hat hackers of Facebook for 2015, 2016 and 2017. Also, he actively works with companies running their bug bounty programs on Bugcrowd and HackerOne. Addition to this, he also holds a Masters degree in CyberSecurity from USA.

Talk title: Pentesting GraphQL Applications For Fun & Profit

Abstract: GraphQL is heavily used in web and mobile applications. This talk will teach you exactly how you should go to on pentesting applications which use GraphQL. Companies not limited to Facebook, Github, Shopify, etc. use GraphQL. First, it will teach you the basics of GraphQL. How it works, how queries, mutations work. Second, it will teach you how to setup pentesting environment. Tools, Softwares to ease the work. Third, we will learn a secret methodology on how to pentest GraphQL applications. Methodology which I derived after trying and testing a lot of things. Fourth, read life case studies of bugs found using the given methodology will be covered.

About: A complete tech enthusiast always seeking experience with new technologies, Ankit Giri is an expert in application security, specializing primarily in web application and mobile application security. He is currently leading the Training and Development at Enciphers. Prior to working with the current firm, his professional experience in the field includes speaking, presenting, and blogging, with a diverse background in writing informational blogs. He has published article in PenTest magzine on IoT security. Ankit has presented his research in different conferences including BSides, seminars, and Owasp & null chapter meetups on the following topics: Cloud Security & Best Practices in AWS, Pwning Windows Mobile Applications, IoT Security Risks & Challenges, Application of Machine Learning in Criminal Profiling, Pentesting Mobile Applications. Ankit has expertise as a penetration tester, and OWASP Top 10 Vulnerability understanding, detection, and remediation. He is a Bug Bounty enthusiast and has been featured in the Hall of Fame of EFF, GM, PagerDuty, Sony, AT&T, HTC, Mobikwik, and many others. He is also one of the top rated writers on Quora in the following categories: The Most Viewed Writer in Web Application Security, The Most Viewed Writer in Pentest, and Second Most Viewed Writers in Network Security. He is the chapter leader of Peerlyst Delhi NCR.

Talk title: Mastering AWS Pentesting and Methodology

Abstract: There have been patterns that have been found in AWS environment while exploring insecure S3 buckets, misconfiguration and compromised credentials flaws. These flaws are an outcome of the way the particular environment was configured and is not a flaw in AWS services itself, and are therefore inevitable. Finding the flaws relies on specific knowledge and approach as these attacks are specific.

• Developing an approach toward pentesting a specific cloud environment.
• Different tools available for pentesting cloud-specific environments, short demo on couple of tools.
• Areas to look in an AWS for flaws and misconfiguration, understanding shared responsibility model.

About: Seedon D'Souza is an Independent Security Researcher, RC hobbyist & HAM radio operator. As an inventor he would like to give back to the Red Teaming community an arsenal of covert and ingenious hardware tools that will help pentesters in real situations. Currently he is working on UAV/UGV platforms for pentesters to automatically deploy and gain foothold on networks with physical barriers.

Talk title: Kali on Wheels

Abstract: KALI ON WHEELS is an UGV *(unmanned ground vehicle)* platform which runs Kali Linux. It gives freedom for a penetration tester to perform Red Teaming activity from anywhere as long as both the devices have a stable internet connection. KOW is built around a SOC *(Raspberry Pi)* but it could be ported to any SOC or an Android phone for simplicity.
Usage:

• Pentesting in hazardous environments.
• Low profile of KOW makes it easier to stay hidden and the ability to shutdown peripherals extends the performance time.
• KOW can stay dormant for up to a month.
• Ability to gather information with on-board camera and the ability to see in the dark with IR flashlights.
• Quickly change position with High torque 4-WD Actuators.
• Ardupilot Mission Planner helps in Autonomous navigation.
• Can disrupt a business by performing WiFi de-auth attack for 72 Hours.
• Can perform packet capture for 72 Hours on any frequency using onboard SDR (software defined radio) which is not limited to Bluetooth and WiFi, also the Digital and Analog low power radio communications (walkie talkies) could be demodulated in real-time to eavesdrop on radio voice communication.
• Anything you could possibly imagine doing on a Kali box from a safe distance.