Bsides Las Vegas: BEEMKA / Electron Post-Exploitation When the Land Is Dry

Context Consultant Pavel Tsakalidis will be presenting his Electron Post-Exploitation Toolkit BEEMKA at this year’s BSides in Las Vegas.

Aug 06 2019
06 Aug 2019 11:30 - 12:25
Breaking Ground, Tuscany Suites & Casinos 255 E Flamingo Rd, Las Vegas, NV 89169 Show Map

Now that you have a shell, you need to establish persistence. How about this time, you use slack.exe without modifying its signature? Or Skype, WhatsApp, or even Visual Studio Code?

An architecture decision makes backdooring legitimate applications easy, and enables attackers to egress data from both within the application (your stored passwords / application session etc) and from the operating system. And as ElectronJS is cross-platform, the sky’s the limit! Batteries included – yes, there’s a tool for that!

For more information, visit BSides Las Vegas.

CREST
CREST STAR
CHECK IT Health Check Service
CBEST
Cyber Essentials
CESG Certified Service
First - Improving Security Together
BSI ISO 9001 FS 581360
BSI ISO 27001 IS 553326
PCI - Approved Scanning Vendor
NCSC CCSC - Assured Service Provider