Simon Lachkar
Simon leads the full-scope penetration testing team at Desjardins Group, one of Canada's largest financial institutions. Previously, he worked as a technical team leader and penetration tester in Canada and France. Simon has recently been involved in developing the AnsibleHound project.
Session
05-14
16:30
30min
The OpenGraph diary: Attack path management applied to Ansible
Charl-alexandre Le Brun, Simon Lachkar
This presentation will focus on AnsibleHound, a collector that adds Ansible WorX and Ansible Tower attack paths to BloodHound. Additionally, we will conduct a thorough exploration of Ansible exploitation and abuse through attack path management. This will enable both attackers and defenders to identify hybrid attack paths.
Our presentation will provide you with three key takeaways:
- Discovery and offensive knowledge for Ansible exploitation
- Integrate Ansible in the identity surface using AnsibleHound
- Hybrid attack paths exploitation between Active Directory, Ansible and Github
Blue Team
Salle de bal