Let’s Build MALWARE Command and Control From Scratch!



Video Summary

Video Summary

The video discusses the latest functionalities and features of a stable version of a PowerShell agent designed for testing and demonstration in a controlled environment. It showcases the agent’s capabilities, including executing various commands and performing network scans, while emphasizing its stealth and effectiveness.

Key Points:

  • The stream aims to showcase the PowerShell agent’s capabilities rather than just holding a meeting.
  • A stable version of the agent is introduced, including its integration with the Mythic framework.
  • The presenter demonstrates generating a new Beacon and executing commands on a SQL machine within a domain controller lab.
  • Commands available include network configuration retrieval, port scanning, process listing, and user permission checks.
  • The agent aims to evade detection by using native PowerShell syntax instead of standard binaries for commands.
  • Features such as user enumeration through Active Directory and NTLMv2 hash capture are discussed, highlighting the agent’s advanced capabilities.
  • Integration with Mythic enhances functionality, allowing easy reporting and management of command execution within the database.
  • The presenter’s future goals include adding the ability to execute both PowerShell scripts and C# assemblies through the agent.
  • The presenter thanks patrons for their support and invites suggestions for future features to be integrated into the agent.

Youtube Video: https://www.youtube.com/watch?v=3M_1Q65s57g
Youtube Channel: Lsecqt
Video Published: 2024-11-13T20:16:45+00:00