New Red Team Networking Techniques for Initial Access and Evasion

Explore advanced red team networking techniques for gaining initial access to corporate intranets without relying on traditional phishing, public-facing application exploits, or valid credentials in this DEF CON 33 conference talk. Learn how to leverage stateless tunnels like GRE and VxLAN, which are commonly used by major companies including Cloudflare and Amazon, to establish unauthorized network access. Discover evasion techniques that exploit company intranets lacking proper source IP filtering, enabling red teamers to perform activities like password spraying while avoiding detection by incident response teams. Examine critical vulnerabilities in VxLAN implementations within Linux Kernel and RouterOS that affect numerous organizations including ISPs, where default configurations allow tunnel hijacking even through encrypted connections on private IP interfaces. Understand how these vulnerabilities can escalate to domain compromises when routing protocols like BGP or OSPF are involved, and see demonstrations of attack vectors available after successful tunnel hijacking or router compromise. Gain insights into mitigation strategies that companies can implement to protect against these networking-based attack techniques, while learning practical tools and scanning methods for red team operations targeting corporate network infrastructure.