Metasploit 3.2 Makes AV Look Silly | DiD is the Only Answer

By Daniel Miessler on January 14th, 2009: Tagged as Information Security

Three words: Don’t. Trust. AV.


Bypassing AV with Metasploit from John Strand on Vimeo.

  • Least privilege
  • Ingress/Egress filtering
  • NIP/DS
  • HIP/DS
  • For all of those, log your ass off
  • Most importantly, read the logs

If you’re not doing most of these things, and you have something on your network worth selling, you are probably a source of income for someone with an accent. ::

  • Pingback: Andrew Hay » Blog Archive » links for 2009-01-15

  • dapxin

    ….an accent.

    you dont want to sound ridiculous to some of your audience….

  • http://dmiessler.com/ Daniel Miessler

    I don't understand your comment, Daxpin.

  • http://dmiessler.com/ Daniel Miessler

    All I meant by my comment was that most professional level, organized crime is done from outside the United States. I was trying to say “hacked by Eastern Europeans or the Chinese” in a different way.

    I don't have anything against accents. I rather like them, actually. :)

  • Anon

    It would be nice if you posted that link in the video in the text..

  • Anon

    It would be nice if you posted that link in the video in the text..

  • Pingback: anti-virus usage fail | VistaSpyware.com


Top

Popular

Information Security / Technology

Politics

Philosophy & Religion

Technology & Science

Culture & Society

Miscellaneous

Arguments

Projects

Collections

Twitter

What I'm Reading

Favorite Books and Essays

Top Blog Categories

Inputs