Getting Shells When Metasploit Fails - Ryan Linn - CarolinaCon9

Ryan Linn demonstrates techniques for bypassing antivirus, IPS, and egress filtering to gain system access without standard exploits.

Penetration Tests aren't new, and most companies have figured out how to eliminate the low hanging fruit. Some have even gone above and beyond and deployed technologies like Network AV, IPS, and egress filtering. In 50 minutes, this talk is going to go through different ways of getting access to systems on the network without exploits and working around common hardening. Leveraging configuration weaknesses, common hardening oversights, and more, we'll go through ways to get around difficult AV systems, network AV, using open source and commonly available tools to get access to boxes were the standard stuff fails. Join us for a adventure with few slides and lots of shells, just make sure to keep your hands and feet inside the ride at all times.