Black Hat Go

7ABUSING DATABASES AND FILESYSTEMS

Now that we’ve covered the majority of common network protocols used for active service interrogation, command and control, and other malicious activity, let’s switch our focus to an equally important topic: data pillaging.

Although data pillaging may not be as exciting as initial exploitation, lateral network movement, or privilege escalation, it’s a critical aspect of the overall attack chain. After all, we often need data in order to perform those other activities. Commonly, the data is of tangible worth to an attacker. Although hacking an organization is thrilling, the data itself is often a lucrative prize ...