null Bangalore Humla 22 December 2018 Beating the AV Register

Null offensive hacking hands-on training.

Proposed sessions for this event:

• Beating the AV by Harsh Thakur

Workshop Objective:

• Creating undetectable payloads
• Bypassing behavioral detection
• Delivery techniques

Table of Contents:

● Creating undetectable payload
- Polymorphic code
- Packing
- Wrappers like pyherion
- Custom code
● Bypassing behavioral detection
- DLL hijacking
- DLL preloading
- DLL injection
- Domain Fronting
● Delivery techniques
- HTML smuggling

It is a complete hands-on session covering the above mentioned topics. However there will be many other simple exercises running through 6 hrs in day.

Link to Questionnaires:

https://goo.gl/forms/4qIozHgEuY3yRjUz

(Note: The participants will be selected by the champion(s) based on both online registration and the Google form responses received. A confirmation email with the venue details will be sent upon successful selection.)

Software Prerequisites:

Attendees must ensure that they have following --->
1. Windows as a VM
2. Linux OS (preferably Parrot OS or kali) as host or installed in the same virtual environment
3. Quick heal AV pro and Symantec’s Norton AV (Trial version would suffice )
4. Install Veil-framework with all the dependencies

Knowledge Prerequisites:

Basics of Python and general knowledge about exploitation and post exploitation

Download links:

For quickheal: https://www.quickheal.co.in/download-free-antivirus?p=34/
For Norton: https://us.norton.com/downloads
For Veil: https://github.com/Veil-Framework/Veil

Important Note

• If you cannot make it to the event, in case of any unforeseen circumstances, please unregister yourself and give your seat to the many others who are waiting to attend. You can unregister by replying to this email with SUBJECT: PLEASE UNREGISTER

• In the event that you are not attending and we do not receive 'unregister' notification, we will give preference to other attendees henceforth(due to sheer number of interested attendees) for the upcoming workshop events of null such as humla/bachaav/Puliya. Your cooperation is solicited.