Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Circumventing the Guardians - How the Security Features in State-of-the-Art TLS Inspection Solutions Can Be Exploited for Covert Data Exfiltration

Black Hat via YouTube

Start learning Write review
Boot.dev Ad

Learn Backend Development Part-Time, Online

Learn More → Coursera Ad

AI, Data Science & Cloud Certificates from Google, IBM & Meta

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This talk demonstrates SNIcat, a method for covertly exfiltrating data through a security perimeter that performs TLS inspection. It also covers detection and mitigation.

Syllabus

Introduction
Who am I
Agenda
Background
Snicket
TLS Inspection Devices
Simple TLS handshake
Whats next
Command and Control
Agent and C2
Traffic Capture
Core Functionality
Mitigation Detection
Conclusion
Sneakout
Demo Environment
Demo Client
Outro

Taught by

Black Hat

Reviews

Start your review of Circumventing the Guardians - How the Security Features in State-of-the-Art TLS Inspection Solutions Can Be Exploited for Covert Data Exfiltration

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.