Simon Lachkar Offensive Team Lead, Desjardins Group
Simon leads the full-scope penetration testing team at Desjardins Group, one of Canada's largest financial institutions. Previously, he worked as a technical team leader and penetration tester in Canada and France. Simon has recently been involved in developing the AnsibleHound project.
Talk: The OpenGraph diary: Attack path management applied to Ansible
Talks will be streamed on YouTube and Twitch for free.
This presentation will focus on AnsibleHound, a collector that adds Ansible WorX and Ansible Tower attack paths to BloodHound. Additionally, we will conduct a thorough exploration of Ansible exploitation and abuse through attack path management. This will enable both attackers and defenders to identify hybrid attack paths.
Our presentation will provide you with three key takeaways:
- Discovery and offensive knowledge for Ansible exploitation
- Integrate Ansible in the identity surface using AnsibleHound
- Hybrid attack paths exploitation between Active Directory, Ansible and Github