Tearing Apart a Datto Device

NetSPI leadership distills four key themes from Black Hat USA 2024, where the team demoed its CAASM solution, unveiled a $500 laser hardware hacking tool, and paired EASM with CAASM for CTEM.

This Linux case study covers finding SSH servers, running dictionary attacks against weak passwords, then abusing overly permissive sudo rules on sh, vi, python, and nmap to escape to a root shell.

NetSPI shows why .NET SecureString still leaks passwords in memory via NetworkCredential, and demonstrates safer login handling using pinned mutable byte arrays instead of immutable strings.

NetSPI offers three best practices for making third-party pentest data compatible with security orchestration, since static PDF reports and custom formats hinder automated correlation and remediation.

Scott Sutherland shows how to bypass SQL Server logon trigger restrictions by spoofing hostnames and application names with lesser-known connection string properties, using SSMS and PowerUpSQL.

Dumps Windows auto-login credentials through SQL Server using xp_regread and PowerUpSQL, covering post-SP4 access restrictions and useful registry reads for least-privilege logins.