Exploiting Fundamental Weaknesses in Command and Control (C&C) Panels

[Aerosol]

What This Talk is All About ?!

? Learning about the different insights gathered from real-time

testing of C&C panels

? Understanding the facts and C&C design of botnet families

? Zeus / ICE 1X/ Citadel / BetaBot etc.

? Busting several myths about C&C architecture and deployments

? Learning what methods to follow when direct exploitation is not

possible

? Utilizing multiple vulnerabilities to attack C&C panels

? Gathering information using weak C&C configurations

? Building C&C intelligence for Incident Response and automated

solutions

Read more: http://www.secniche.org/blackhat-2014/blackhat_2014_briefings_presentation_exp_cc_flaws_adityaks.pdf