Dailydave mailing list archives

Re: New CANVAS Release Video!


From: Dave Aitel <dave.aitel () gmail com>
Date: Thu, 04 Feb 2016 22:06:28 +0000

https://vimeo.com/154107528 is the right video. Total fail on my part. The
private video is just me doing a dance in our office. Although I am
Hispanic, I did not inherit any dancing ability!

Anyways, try clicking the above link instead. :)
-dave

On Thu, Feb 4, 2016 at 2:21 PM Dave Aitel <dave () immunityinc com> wrote:

https://vimeo.com/153437917

When you're testing your defense systems a lot of time you want to use
some of the newer techniques - so we added the WMI persistence stuff to
CANVAS. Also I think that stuff is great fun anyways. Imagine a trojan
that only runs when USB keys are popped into the system, for example.
Seems cool to me!!!

Likewise, the Java deserialization attacks we added for WebSphere,
JBoss, etc. all are cross platform and don't touch disk. Not touching
disk is really step-1 for being even remotely stealthy these days.
Realistically you also have to write your whole framework to not call
external programs as well.

ENJOY THE NEW CANVAS EVERYONE! I KNOW I WILL. :)
-dave


_______________________________________________
Dailydave mailing list
Dailydave () lists immunityinc com
https://lists.immunityinc.com/mailman/listinfo/dailydave

_______________________________________________
Dailydave mailing list
Dailydave () lists immunityinc com
https://lists.immunityinc.com/mailman/listinfo/dailydave

Current thread: