SlideShare ist ein Scribd-Unternehmen logo

Le pentest pour les nuls #cybsec16

•
•
Cyber Security Alliance
Cyber Security Alliance

#cybsec16 Rump Session

Technologie
1 von 4
Downloaden Sie, um offline zu lesen
Le pentest pour les nulsLe pentest pour les nuls Alain MowatAlain Mowat
2Le pentest › Externe › Analyse d’un service VPN, un OWA et un site web hébergé par un presta- taire externe › Souvent très peu de failles › Est-ce que l’entreprise est « sécurisée » pour autant ? › Interne › Admin du domaine en 20 minutes › Souvent le même scénario Exploit Elevation de privilèges Latéral Latéral Latéral Latéral Creds admin
3Quelques statistiques
4Conclusions › Arrêtez de faire tourner vos services en root/System › Utilisez LAPS ou équivalent › Évitez l’authentification « simple » › Segmentez votre réseau › Pas juste des VLANs différents… vous avez un FW, utilisez-le › Segmentez vos utilisateurs › Utilisez le(s) compte(s) admin du domaine avec parcimonie › Seulement pour vous connecter aux DCs

Empfohlen

Monitoring avec Zabbix
Monitoring avec ZabbixMonitoring avec Zabbix
Monitoring avec Zabbix
Fourat Zouari
 
Trust No 8 / Ne faisez pas confiance à 8
Trust No 8 / Ne faisez pas confiance à 8Trust No 8 / Ne faisez pas confiance à 8
Trust No 8 / Ne faisez pas confiance à 8
KarenBruner
 
Integrating teamwork and active learning into the classroom
Integrating teamwork and active learning into the classroomIntegrating teamwork and active learning into the classroom
Integrating teamwork and active learning into the classroom
Barbara Oakley
 
Bug Bounty @ Swisscom
Bug Bounty @ SwisscomBug Bounty @ Swisscom
Bug Bounty @ Swisscom
Cyber Security Alliance
 
Blockchain for Beginners
Blockchain for Beginners Blockchain for Beginners
Blockchain for Beginners
Cyber Security Alliance
 
ITSM the John Lewis Way, by Simon Skelton - Service Desk & IT Support Show
ITSM the John Lewis Way, by Simon Skelton - Service Desk & IT Support ShowITSM the John Lewis Way, by Simon Skelton - Service Desk & IT Support Show
ITSM the John Lewis Way, by Simon Skelton - Service Desk & IT Support Show
Simon Skelton
 
Маркетинг финансовых услуг - выступление для студентов
Маркетинг финансовых услуг - выступление для студентовМаркетинг финансовых услуг - выступление для студентов
Маркетинг финансовых услуг - выступление для студентов
Cyril Savitsky
 
Kmeans
KmeansKmeans
Kmeans
guestf0009ea
 

Empfohlen

Monitoring avec Zabbix
Monitoring avec ZabbixMonitoring avec Zabbix
Monitoring avec Zabbix
Fourat Zouari
 
Trust No 8 / Ne faisez pas confiance à 8
Trust No 8 / Ne faisez pas confiance à 8Trust No 8 / Ne faisez pas confiance à 8
Trust No 8 / Ne faisez pas confiance à 8
KarenBruner
 
Integrating teamwork and active learning into the classroom
Integrating teamwork and active learning into the classroomIntegrating teamwork and active learning into the classroom
Integrating teamwork and active learning into the classroom
Barbara Oakley
 
Bug Bounty @ Swisscom
Bug Bounty @ SwisscomBug Bounty @ Swisscom
Bug Bounty @ Swisscom
Cyber Security Alliance
 
Blockchain for Beginners
Blockchain for Beginners Blockchain for Beginners
Blockchain for Beginners
Cyber Security Alliance
 
ITSM the John Lewis Way, by Simon Skelton - Service Desk & IT Support Show
ITSM the John Lewis Way, by Simon Skelton - Service Desk & IT Support ShowITSM the John Lewis Way, by Simon Skelton - Service Desk & IT Support Show
ITSM the John Lewis Way, by Simon Skelton - Service Desk & IT Support Show
Simon Skelton
 
Маркетинг финансовых услуг - выступление для студентов
Маркетинг финансовых услуг - выступление для студентовМаркетинг финансовых услуг - выступление для студентов
Маркетинг финансовых услуг - выступление для студентов
Cyril Savitsky
 
Kmeans
KmeansKmeans
Kmeans
guestf0009ea
 
سبيلك الى الثروة و النجاح
سبيلك الى الثروة و النجاحسبيلك الى الثروة و النجاح
سبيلك الى الثروة و النجاح
Morad Kheloufi Kheloufi
 
DH Menu of Solutions for Sustainable Culture Change
DH Menu of Solutions for Sustainable Culture ChangeDH Menu of Solutions for Sustainable Culture Change
DH Menu of Solutions for Sustainable Culture Change
Delivering Happiness
 
Zaragoza turismo 243
Zaragoza turismo 243Zaragoza turismo 243
Zaragoza turismo 243
Saucepolis blog & Hotel Sauce
 
Trulia Metro Movers Report - Winter 2012
Trulia Metro Movers Report - Winter 2012Trulia Metro Movers Report - Winter 2012
Trulia Metro Movers Report - Winter 2012
Trulia
 
playtime
 
Netiquette
NetiquetteNetiquette
Netiquette
oscargn10
 
Experimental design
Experimental designExperimental design
Experimental design
Dan Toma
 
Mumbai - Zappos - Downtown Project - Dec 10, 2015
Mumbai - Zappos - Downtown Project - Dec 10, 2015Mumbai - Zappos - Downtown Project - Dec 10, 2015
Mumbai - Zappos - Downtown Project - Dec 10, 2015
Delivering Happiness
 
Application of Number
Application of NumberApplication of Number
Application of Number
iteclearners
 
Meosq2 2011 Us Report Final
Meosq2 2011 Us Report FinalMeosq2 2011 Us Report Final
Meosq2 2011 Us Report Final
ktarca
 
The secret of light Itziar
The secret of light ItziarThe secret of light Itziar
The secret of light Itziar
isamadero79
 
#СтанемБлиже: спецкурс по межкультурной коммуникации с туристами с Востока
#СтанемБлиже: спецкурс по межкультурной коммуникации с туристами с Востока#СтанемБлиже: спецкурс по межкультурной коммуникации с туристами с Востока
#СтанемБлиже: спецкурс по межкультурной коммуникации с туристами с Востока
School of Efficient Language Studying Lingvocat.com/ Школа результативных языков Lingvocat.com
 
Historia insp aurora silva
Historia insp aurora silvaHistoria insp aurora silva
Historia insp aurora silva
antonio leal
 
Comprension de lectura de los mexicanos
Comprension de lectura de los mexicanosComprension de lectura de los mexicanos
Comprension de lectura de los mexicanos
Ismael Plascencia Nuñez
 
HTML5 for ASP.NET Developers
HTML5 for ASP.NET DevelopersHTML5 for ASP.NET Developers
HTML5 for ASP.NET Developers
Justin Lee
 
Robots are among us, but who takes responsibility?
Robots are among us, but who takes responsibility?Robots are among us, but who takes responsibility?
Robots are among us, but who takes responsibility?
Cyber Security Alliance
 
iOS malware: what's the risk and how to reduce it
iOS malware: what's the risk and how to reduce itiOS malware: what's the risk and how to reduce it
iOS malware: what's the risk and how to reduce it
Cyber Security Alliance
 
Why huntung IoC fails at protecting against targeted attacks
Why huntung IoC fails at protecting against targeted attacksWhy huntung IoC fails at protecting against targeted attacks
Why huntung IoC fails at protecting against targeted attacks
Cyber Security Alliance
 
Corporations - the new victims of targeted ransomware
Corporations - the new victims of targeted ransomwareCorporations - the new victims of targeted ransomware
Corporations - the new victims of targeted ransomware
Cyber Security Alliance
 
Introducing Man in the Contacts attack to trick encrypted messaging apps
Introducing Man in the Contacts attack to trick encrypted messaging appsIntroducing Man in the Contacts attack to trick encrypted messaging apps
Introducing Man in the Contacts attack to trick encrypted messaging apps
Cyber Security Alliance
 
Understanding the fundamentals of attacks
Understanding the fundamentals of attacksUnderstanding the fundamentals of attacks
Understanding the fundamentals of attacks
Cyber Security Alliance
 
Rump : iOS patch diffing
Rump : iOS patch diffingRump : iOS patch diffing
Rump : iOS patch diffing
Cyber Security Alliance
 

Weitere ähnliche Inhalte

Andere mochten auch

سبيلك الى الثروة و النجاح
سبيلك الى الثروة و النجاحسبيلك الى الثروة و النجاح
سبيلك الى الثروة و النجاح
Morad Kheloufi Kheloufi
 
Trulia Metro Movers Report - Winter 2012
Trulia Metro Movers Report - Winter 2012Trulia Metro Movers Report - Winter 2012
Trulia Metro Movers Report - Winter 2012
Trulia
 
Experimental design
Experimental designExperimental design
Experimental design
Dan Toma
 
Meosq2 2011 Us Report Final
Meosq2 2011 Us Report FinalMeosq2 2011 Us Report Final
Meosq2 2011 Us Report Final
ktarca
 
#СтанемБлиже: спецкурс по межкультурной коммуникации с туристами с Востока
#СтанемБлиже: спецкурс по межкультурной коммуникации с туристами с Востока#СтанемБлиже: спецкурс по межкультурной коммуникации с туристами с Востока
#СтанемБлиже: спецкурс по межкультурной коммуникации с туристами с Востока
School of Efficient Language Studying Lingvocat.com/ Школа результативных языков Lingvocat.com
 

Andere mochten auch (15)

سبيلك الى الثروة و النجاح
سبيلك الى الثروة و النجاحسبيلك الى الثروة و النجاح
سبيلك الى الثروة و النجاح
 
DH Menu of Solutions for Sustainable Culture Change
DH Menu of Solutions for Sustainable Culture ChangeDH Menu of Solutions for Sustainable Culture Change
DH Menu of Solutions for Sustainable Culture Change
 
Zaragoza turismo 243
Zaragoza turismo 243Zaragoza turismo 243
Zaragoza turismo 243
 
Trulia Metro Movers Report - Winter 2012
Trulia Metro Movers Report - Winter 2012Trulia Metro Movers Report - Winter 2012
Trulia Metro Movers Report - Winter 2012
 
 
Netiquette
NetiquetteNetiquette
Netiquette
 
Experimental design
Experimental designExperimental design
Experimental design
 
Mumbai - Zappos - Downtown Project - Dec 10, 2015
Mumbai - Zappos - Downtown Project - Dec 10, 2015Mumbai - Zappos - Downtown Project - Dec 10, 2015
Mumbai - Zappos - Downtown Project - Dec 10, 2015
 
Application of Number
Application of NumberApplication of Number
Application of Number
 
Meosq2 2011 Us Report Final
Meosq2 2011 Us Report FinalMeosq2 2011 Us Report Final
Meosq2 2011 Us Report Final
 
The secret of light Itziar
The secret of light ItziarThe secret of light Itziar
The secret of light Itziar
 
#СтанемБлиже: спецкурс по межкультурной коммуникации с туристами с Востока
#СтанемБлиже: спецкурс по межкультурной коммуникации с туристами с Востока#СтанемБлиже: спецкурс по межкультурной коммуникации с туристами с Востока
#СтанемБлиже: спецкурс по межкультурной коммуникации с туристами с Востока
 
Historia insp aurora silva
Historia insp aurora silvaHistoria insp aurora silva
Historia insp aurora silva
 
Comprension de lectura de los mexicanos
Comprension de lectura de los mexicanosComprension de lectura de los mexicanos
Comprension de lectura de los mexicanos
 
HTML5 for ASP.NET Developers
HTML5 for ASP.NET DevelopersHTML5 for ASP.NET Developers
HTML5 for ASP.NET Developers
 

Mehr von Cyber Security Alliance

Killing any security product … using a Mimikatz undocumented feature
Killing any security product … using a Mimikatz undocumented featureKilling any security product … using a Mimikatz undocumented feature
Killing any security product … using a Mimikatz undocumented feature
Cyber Security Alliance
 

Mehr von Cyber Security Alliance (20)

Robots are among us, but who takes responsibility?
Robots are among us, but who takes responsibility?Robots are among us, but who takes responsibility?
Robots are among us, but who takes responsibility?
 
iOS malware: what's the risk and how to reduce it
iOS malware: what's the risk and how to reduce itiOS malware: what's the risk and how to reduce it
iOS malware: what's the risk and how to reduce it
 
Why huntung IoC fails at protecting against targeted attacks
Why huntung IoC fails at protecting against targeted attacksWhy huntung IoC fails at protecting against targeted attacks
Why huntung IoC fails at protecting against targeted attacks
 
Corporations - the new victims of targeted ransomware
Corporations - the new victims of targeted ransomwareCorporations - the new victims of targeted ransomware
Corporations - the new victims of targeted ransomware
 
Introducing Man in the Contacts attack to trick encrypted messaging apps
Introducing Man in the Contacts attack to trick encrypted messaging appsIntroducing Man in the Contacts attack to trick encrypted messaging apps
Introducing Man in the Contacts attack to trick encrypted messaging apps
 
Understanding the fundamentals of attacks
Understanding the fundamentals of attacksUnderstanding the fundamentals of attacks
Understanding the fundamentals of attacks
 
Rump : iOS patch diffing
Rump : iOS patch diffingRump : iOS patch diffing
Rump : iOS patch diffing
 
An easy way into your sap systems v3.0
An easy way into your sap systems v3.0An easy way into your sap systems v3.0
An easy way into your sap systems v3.0
 
Reverse engineering Swisscom's Centro Grande Modem
Reverse engineering Swisscom's Centro Grande ModemReverse engineering Swisscom's Centro Grande Modem
Reverse engineering Swisscom's Centro Grande Modem
 
Easy public-private-keys-strong-authentication-using-u2 f
Easy public-private-keys-strong-authentication-using-u2 fEasy public-private-keys-strong-authentication-using-u2 f
Easy public-private-keys-strong-authentication-using-u2 f
 
Create a-strong-two-factors-authentication-device-for-less-than-chf-100
Create a-strong-two-factors-authentication-device-for-less-than-chf-100Create a-strong-two-factors-authentication-device-for-less-than-chf-100
Create a-strong-two-factors-authentication-device-for-less-than-chf-100
 
Offline bruteforce attack on wi fi protected setup
Offline bruteforce attack on wi fi protected setupOffline bruteforce attack on wi fi protected setup
Offline bruteforce attack on wi fi protected setup
 
App secforum2014 andrivet-cplusplus11-metaprogramming_applied_to_software_obf...
App secforum2014 andrivet-cplusplus11-metaprogramming_applied_to_software_obf...App secforum2014 andrivet-cplusplus11-metaprogramming_applied_to_software_obf...
App secforum2014 andrivet-cplusplus11-metaprogramming_applied_to_software_obf...
 
Warning Ahead: SecurityStorms are Brewing in Your JavaScript
Warning Ahead: SecurityStorms are Brewing in Your JavaScriptWarning Ahead: SecurityStorms are Brewing in Your JavaScript
Warning Ahead: SecurityStorms are Brewing in Your JavaScript
 
Killing any security product … using a Mimikatz undocumented feature
Killing any security product … using a Mimikatz undocumented featureKilling any security product … using a Mimikatz undocumented feature
Killing any security product … using a Mimikatz undocumented feature
 
Rump attaque usb_caralinda_fabrice
Rump attaque usb_caralinda_fabriceRump attaque usb_caralinda_fabrice
Rump attaque usb_caralinda_fabrice
 
Operation emmental appsec
Operation emmental appsecOperation emmental appsec
Operation emmental appsec
 
Hacking the swisscom modem
Hacking the swisscom modemHacking the swisscom modem
Hacking the swisscom modem
 
Colt sp sec2014_appsec-nf-vfinal
Colt sp sec2014_appsec-nf-vfinalColt sp sec2014_appsec-nf-vfinal
Colt sp sec2014_appsec-nf-vfinal
 
Asfws2014 tproxy
Asfws2014 tproxyAsfws2014 tproxy
Asfws2014 tproxy
 

Le pentest pour les nuls #cybsec16

  • 1. Le pentest pour les nulsLe pentest pour les nuls Alain MowatAlain Mowat
  • 2. 2Le pentest › Externe › Analyse d’un service VPN, un OWA et un site web hébergé par un presta- taire externe › Souvent très peu de failles › Est-ce que l’entreprise est « sécurisée » pour autant ? › Interne › Admin du domaine en 20 minutes › Souvent le même scénario Exploit Elevation de privilèges Latéral Latéral Latéral Latéral Creds admin
  • 4. 4Conclusions › Arrêtez de faire tourner vos services en root/System › Utilisez LAPS ou équivalent › Évitez l’authentification « simple » › Segmentez votre réseau › Pas juste des VLANs différents… vous avez un FW, utilisez-le › Segmentez vos utilisateurs › Utilisez le(s) compte(s) admin du domaine avec parcimonie › Seulement pour vous connecter aux DCs