“I took the Active Directory Beginner and Advanced Red Team Courses for the CRTP/CRTE Certification. It was a blast of a training session and so much information that brought me forward in this area. Looking towards the Azure training. Can only recommend taking the trainings to everyone especially the bootcamps as with that amount of information you need more time to get it into your blood.”
About
Nikhil Mittal is a hacker, infosec researcher, speaker and enthusiast. His area of…
Activity
-
Enrollment for the Azure Red Team Expert bootcamp is now officially open! During the four weekly training sessions, I will be teaching advanced…
Enrollment for the Azure Red Team Expert bootcamp is now officially open! During the four weekly training sessions, I will be teaching advanced…
Liked by Nikhil Mittal
-
Enrollment is open for October 2024 batches for three of Altered Security's popular bootcamps. Learn on-prem and Azure red teaming with us. Join…
Enrollment is open for October 2024 batches for three of Altered Security's popular bootcamps. Learn on-prem and Azure red teaming with us. Join…
Shared by Nikhil Mittal
Experience
Education
Publications
-
RACE - Minimal Rights and ACE for Active Directory Dominance
DEF CON 27
My talk at DEFCON 27 on abusing ACLs and Security Descriptors in Active Directory for domain dominance.
-
Forging Trusts for Deception in Active Directory
BruCON
My talk at BruCON 2018 about using decoy AD objects for easy deception in Active Directory.
-
Hacked? Pray that the Attacker used PowerShell
ITDEFENSE 2018
The talk I gave at ITDefense 2018 on how PowerShell is useful for Blue Teams.
-
(Updated) Evading Microsoft ATA for Active Directory Domination
BruCON 2017
An updated talk I gave at BruCON 2017 on bypassing Microsoft Advanced Threat Analytics (ATA). I demonstrate techniques to bypass, avoid and attack ATA in this talk.
-
Red Team Revenge : Attacking Microsoft ATA
44CON 2017
The talk I gave at 44CON 2017 on identifying and targeting Microsoft Advanced Threat Analytics (ATA)
-
Evading Microsoft ATA for Active Directory Domination
BlackHat USA 2017
The talk I gave at Black Hat USA 2017 on bypassing Microsoft Advanced Threat Analytics (ATA). I demonstrate techniques to bypass, avoid and attack ATA in this talk.
-
PowerShell for Practical Purple Teaming
x33fcon 2017
Talk at x33fcon 2017 where I discuss use of PowerShell for Purple Teaming.
-
AMSI: How Windows 10 Plans to Stop Script-Based Attacks and How Well It Does It
Black Hat USA 2016
A detailed discussion on detection capabilities of Microsoft Anti Malware Scan Interface (AMSI). The talk have live demonstrations on how AMSI improves security of Windows 10 boxes and how it can be bypassed and avoided.
-
Continuous Intrusion: Why CI tools are an Attacker's Best Friends
Black Hat Europe 2015
In this talk I discuss and demonstrate practical security risks posed by various CI tools to an enterprise network.
-
Lethal Client Side Attacks using PowerShell
DeepSec
The talk I gave at Deepsec 2014. It is about using PowerShell for Client Side Attacks like forged attachments and phishing.
-
PowerPreter: Post Exploitation Like a Boss
DEFCON 21
The talk I gave at Defocn 21 about Powerpreter, a post exploitation tool written in powershell.
-
Hacking the future with USB HID
RSA China
The talk I gave at RSA China. It was about using USB HID to hack Windows 8 and Mac OS X Mountain Lion.
-
Kautilya and Nishang
Black Hat USA
I talked about my two open source projects, Kautilya and Nishang at Black Hat USA. Nishang was demonstrated at the BHUSA Arsenal.
-
Creating Havoc using Human Interface Devices
PHDays
The workshop I did at PHDays, Moscow. It was all about using HIDs in Penetration Tests.
-
More fun using Kautilya
Troopers
A presentation I gave at Troopers'12. This featured some never seen before payloads for breaking into Linux using a Teesny device.
-
Teensy Programming for Everyone
Black Hat Europe
This was a workshop I coduncted at Black Hat Europe'12. The workshop explains how to program a USB HID, Teensy in this case, for usage in offensive security.
-
The Pwnage Saga Continues
Black Hat Europe
This was my presentation at Black Hat Europe'12. This showcased improvements and some new neat attack vectors added to Kautilya.
-
Kautilya: Teensy beyond shell
Black Hat Abu Dhabi
A paper which I presented at Black Hat Abu Dhabi. In this paper a toolkit called Kautilya was introduced which aims to make pwmage easier in Penetration Tests using Teensy. Kautilya is free and open source and can be downloaded from http://code.google.com/p/kautilya/
-
Maareech - Look its a HID made up of gold
Maareech is a PoC malware which is a combination of Teensy. Powershell scripts and executables. With limitations, this can be used as an autmoated Windows Domain takeover tool. It is an automated tool which if connected to a system in Win environment provides access to all systems in that domain.
-
Here are your keystrokes
Hackfest 2011
A talk by me which highlighted usage of Teensy in a Penetration test. it included overview of current status of Penetration Test and usage of Teensy for various PT activities.
-
Ultimate Pen Test - Compromising a highly secure environment
Clubhack 2010
Presentation detailing a Pen Test story of highly secure environment. The client environment was totally compromised which was secure by (almost) all industry standards and no detection of intrusion was traced.
-
Vxworks: Threat, Impact and Exploitability for Indian Cyber Space
Not published
My research on Vxworks vulnerabilities which were made public by HD Moore. The paper detailed an in depth assessment of 'Indian Cyberspace' which included scanning of nearly 2.7 million IP addresses and analysis of thousands of devices. Details were shared in a short format with CERT-In, but a reply was never received.
Projects
-
Nishang
- Present
Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security and post exploitation during Penetraion Tests.
-
Kautilya
- Present
Kautilya is a toolkit which provides various payloads for Human Interface Devices which may help in breaking in a computer. The toolkit contains nice customizable payloads for Windows 7 & above, Ubuntu and Mac OS X.
Languages
-
English
-
Recommendations received
-
LinkedIn User
3 people have recommended Nikhil
Join now to viewMore activity by Nikhil
-
🎉 Thrilled to announce that I've successfully completed the Certified Red Team Professional (CRTP) certification! 🛡️ This certification has been…
🎉 Thrilled to announce that I've successfully completed the Certified Red Team Professional (CRTP) certification! 🛡️ This certification has been…
Liked by Nikhil Mittal
-
الحمدلله I’m delighted to announce that successfully i pass the exam and gained the certificate and become Certified Red Team Professional (CRTP).…
الحمدلله I’m delighted to announce that successfully i pass the exam and gained the certificate and become Certified Red Team Professional (CRTP).…
Liked by Nikhil Mittal
-
Glad to achieve the Certified Red Team Expert certificate from Altered Security
Glad to achieve the Certified Red Team Expert certificate from Altered Security
Liked by Nikhil Mittal
-
Hi linkedin, this time following along with my goals as I mentioned in my previous post, I'm very glad to announce I've cleared the CRTE…
Hi linkedin, this time following along with my goals as I mentioned in my previous post, I'm very glad to announce I've cleared the CRTE…
Liked by Nikhil Mittal
-
I had the opportunity to dive into the Red Team side of cyber-security with CRTP. It's fun to be called "Certified Red Team Professional". I have to…
I had the opportunity to dive into the Red Team side of cyber-security with CRTP. It's fun to be called "Certified Red Team Professional". I have to…
Liked by Nikhil Mittal
-
“At one point or another, the victim needs to use the browser – to click on something, enter their credentials or open an attachment.” Watch our…
“At one point or another, the victim needs to use the browser – to click on something, enter their credentials or open an attachment.” Watch our…
Liked by Nikhil Mittal
-
I'm thrilled to share a significant milestone in my cybersecurity journey. I've officially become a Certified Red Team Professional (CRTP)!🥳🎉🥳This…
I'm thrilled to share a significant milestone in my cybersecurity journey. I've officially become a Certified Red Team Professional (CRTP)!🥳🎉🥳This…
Liked by Nikhil Mittal
-
It was my honor to moderate a panel discussion at the DEF CON Hacker Convention Creator stage as part of Adversary Village this year, with; A…
It was my honor to moderate a panel discussion at the DEF CON Hacker Convention Creator stage as part of Adversary Village this year, with; A…
Liked by Nikhil Mittal
-
I’m happy to share that I have obtained a new certification: Certified Red Team Professional (CRTP) from Altered Security! Thanks Nikhil Mittal and…
I’m happy to share that I have obtained a new certification: Certified Red Team Professional (CRTP) from Altered Security! Thanks Nikhil Mittal and…
Liked by Nikhil Mittal
-
Alhamdulillah, I am excited to share that I have passed my Certified Red Team Professional (CRTP) certification exam. The journey through the CRTP…
Alhamdulillah, I am excited to share that I have passed my Certified Red Team Professional (CRTP) certification exam. The journey through the CRTP…
Liked by Nikhil Mittal
-
I’m thrilled to share that I’ve successfully passed the Certified Red Team Professional (CRTP) exam! This milestone represents a significant step…
I’m thrilled to share that I’ve successfully passed the Certified Red Team Professional (CRTP) exam! This milestone represents a significant step…
Liked by Nikhil Mittal
-
🎈 Altered Security Nikhil Mittal Cheat Sheet : https://lnkd.in/eJg2r-rg #CRTP
🎈 Altered Security Nikhil Mittal Cheat Sheet : https://lnkd.in/eJg2r-rg #CRTP
Liked by Nikhil Mittal
Other similar profiles
Explore collaborative articles
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
Explore MoreOthers named Nikhil Mittal in India
-
Nikhil Mittal
-
Nikhil Mittal
-
Nikhil Mittal
Senior Lead - Data Engineering
-
Nikhil Mittal
-
Nikhil Mittal
CA, IIM, Tax Leader at Max Healthcare Ex KPMG
407 others named Nikhil Mittal in India are on LinkedIn
See others named Nikhil Mittal