[Dailydave] New CANVAS Release Video!

Moses Hernandez moses at moses.io
Thu Feb 4 21:12:28 EST 2016


No no wait. I think some of us want a password to a private dance video.

On Thu, Feb 4, 2016 at 6:13 PM Dave Aitel <dave.aitel at gmail.com> wrote:

> https://vimeo.com/154107528 is the right video. Total fail on my part.
> The private video is just me doing a dance in our office. Although I am
> Hispanic, I did not inherit any dancing ability!
>
> Anyways, try clicking the above link instead. :)
> -dave
>
> On Thu, Feb 4, 2016 at 2:21 PM Dave Aitel <dave at immunityinc.com> wrote:
>
>> https://vimeo.com/153437917
>>
>> When you're testing your defense systems a lot of time you want to use
>> some of the newer techniques - so we added the WMI persistence stuff to
>> CANVAS. Also I think that stuff is great fun anyways. Imagine a trojan
>> that only runs when USB keys are popped into the system, for example.
>> Seems cool to me!!!
>>
>> Likewise, the Java deserialization attacks we added for WebSphere,
>> JBoss, etc. all are cross platform and don't touch disk. Not touching
>> disk is really step-1 for being even remotely stealthy these days.
>> Realistically you also have to write your whole framework to not call
>> external programs as well.
>>
>> ENJOY THE NEW CANVAS EVERYONE! I KNOW I WILL. :)
>> -dave
>>
>>
>> _______________________________________________
>> Dailydave mailing list
>> Dailydave at lists.immunityinc.com
>> https://lists.immunityinc.com/mailman/listinfo/dailydave
>>
> _______________________________________________
> Dailydave mailing list
> Dailydave at lists.immunityinc.com
> https://lists.immunityinc.com/mailman/listinfo/dailydave
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.immunityinc.com/pipermail/dailydave/attachments/20160205/79ca1051/attachment.html>


More information about the Dailydave mailing list