The document discusses attacking virtualization infrastructure through various exploits. It presents the Virtualization ASsessment TOolkit (VASTO) which is an exploit pack focusing on virtualization and cloud security. It then demonstrates several exploits against VMware virtualization software, including path traversal exploits, session hijacking, and code execution exploits affecting the vCenter management console, ESXi hypervisor, and supporting services. The talk encourages testing these attacks to better understand vulnerabilities in virtualization platforms.

8. Yes , it is due to an exploit

9. Yes , it can be patched

10. Yes , it will happen again

11. No , it is not something you can easily audit

12. We’re going to attack virtualization infrastructure