Security BSides London, the UK’s biggest community-driven infosec conference is happy to announce its 8th iteration open to all regardless of background, skill level, income or job-title.
Doors to the main event open at 8.30am with talks starting at 9am on 5 June 2019
Workshops will be held on 4 June 2018 starting at 10am; Pre-registration is required
Please remember that Security BSides London has astrict code of conduct available here.
My talk is about using security tools setup by an organisation against itself. Specifically vulnerability scanners and NAC solutions.
Generally organisations will scan host on a network without think about the consequences of doing this. Often security solutions will blindly attempt to authenticate to a host during the scanning process which can be abused by an attacker to capture credentials used by the the tool to authenticate to large number of host within the enterprise.
The talk will include information on general misconfigurations in these solutions and demos of how to exploit them. There will also be a remediation section at the end.
