Veil Evasion and Client Side Attacks

1. Veil-Evasion and Client side
attacks
Sujay Gankidi

2. About Me
• Occupation : Security Consultant
• Proficiency : Script kiddie
• Twitter : @doy143in

3. Agenda
• Veil Framework
▫ Components
 Usage
• Client side attacks with Veil-Evasion

4. Veil-Framework
• Collection of red team security tools that
implement various attack methods focused on
evading detection.
▫ Veil-Evasion
▫ Veil-Catapult
▫ Veil-Pillage
▫ Veil-PowerView
▫ Veil-Ordnance

5. Authors and Links
• Site: https://www.veil-framework.com/
• Repo: https://github.com/Veil-Framework/
• Twitter: @veilframework
HarmJ0y Twitter: @HarmJ0y
Chris Truncer Twitter: @ChrisTruncer
Mike Wright Twitter: @TheMightyShiv

6. Veil-Evasion
• Tool to generate payload executables
• Bypass common antivirus solutions

7. Veil-Catapult
• Payload delivery tool
• Integrates with Veil-Evasion

8. Veil-Pillage
• Post-exploitation framework
• Integrates with Veil-Evasion

9. Veil-Ordnance
• Stage shell code generator
• Initially relied on msfvenom
• Currently has its own code
• Supports 6 payloads and 1 xor encoder

10. Veil-PowerView
• Collection of PowerShell projects

11. Installation
Git clone https://github.com/Veil-
Framework/Veil.git
./install.sh

12. Anatomy of a client-side-attack
• Inside-Out
• Attack Vector
• Staged payload
• Connection handler
• Post exploitation

13. Demo

14. Q&A
TanQ