BSidesRGV2025

Attack Portion

What is a Command and Control Server?

A brief history of Command and Control Servers

• Metasploit
• Armitage
• Colbalt Strike
• Empire

How do they work

• Server
• Listeners
• Stagers
• Agents
• Extending the Agent

Empire's implementation

• Show Starkiller interface
• Demonstrate generating a listener
• Demonstrate generating a Stager
• Execute a Stager on a Windows device
• Demonstrate interacting with an Agent
• Demonstrate extending an Agents capabilities.

Defense Portion

/* possible ideas*/

• show network traffice analysis of Empire agent
• show memory analysis of Empire agent
• Discuss possible Windows Operating System defenses