The document discusses how Microsoft Azure is positioned as a cloud platform focused on users and the enterprise. It highlights key trends in IT like big data, mobility, and cloud adoption driving companies to enable employees to work from anywhere. The document also summarizes Microsoft Azure's global infrastructure, consistent platform approach, and security capabilities built on decades of experience delivering cloud services at scale.
The document summarizes key points from a presentation on B and C financing rounds for technology companies. It discusses trends showing B and C rounds are getting larger. The median European Series B round is now €12 million, while the median Series C is €21 million. Good execution is important for successful follow-on rounds, including clear metrics like revenue, user growth, and strategic partnerships. Recurring themes that indicate success include articulating the value proposition, attractive business fundamentals, and overarching indicators like international presence and third-party validation. The document offers tips for successful fundraising, such as establishing early investor relationships and involving the board.
The document discusses how Microsoft Azure is positioned as a cloud platform focused on users and the enterprise. It highlights key trends in IT like big data, mobility, and cloud adoption driving companies to enable employees to work from anywhere. The document also summarizes Microsoft Azure's global infrastructure, consistent platform approach, and security capabilities built on decades of experience delivering cloud services at scale.
The document summarizes key points from a presentation on B and C financing rounds for technology companies. It discusses trends showing B and C rounds are getting larger. The median European Series B round is now €12 million, while the median Series C is €21 million. Good execution is important for successful follow-on rounds, including clear metrics like revenue, user growth, and strategic partnerships. Recurring themes that indicate success include articulating the value proposition, attractive business fundamentals, and overarching indicators like international presence and third-party validation. The document offers tips for successful fundraising, such as establishing early investor relationships and involving the board.
SMAU MILANO 2023 | 𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐓𝐫𝐚𝐢𝐧𝐢𝐧𝐠 𝐉𝐨𝐮𝐫𝐧𝐞𝐲 La nuova frontiera della formazio...SMAU
SMAU MILANO 2023 | SMAU MILANO 2023 | 𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐓𝐫𝐚𝐢𝐧𝐢𝐧𝐠 𝐉𝐨𝐮𝐫𝐧𝐞𝐲 La nuova frontiera della formazione professionale: gamification e apprendimento continuo
SMAU MILANO 2023 | 𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐓𝐫𝐚𝐢𝐧𝐢𝐧𝐠 𝐉𝐨𝐮𝐫𝐧𝐞𝐲 La nuova frontiera della formazio...SMAU
SMAU MILANO 2023 | SMAU MILANO 2023 | 𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐓𝐫𝐚𝐢𝐧𝐢𝐧𝐠 𝐉𝐨𝐮𝐫𝐧𝐞𝐲 La nuova frontiera della formazione professionale: gamification e apprendimento continuo
SMAU MILANO 2023 | SMAU MILANO 2023 | Intelligenza Artificiale e chatbotsSMAU
SMAU MILANO 2023 | SMAU MILANO 2023 | Intelligenza Artificiale e chatbots: nemici o alleati dei business game? 5 requisiti di un “buon” business game di marketing strategico, potenzialmente integrabile proprio con strumenti di IA, come antidoto alla crescente disabitudine al problem solving e al pensiero critico, al lavoro di gruppo e all'orientamento strategico
2. Giovanni Cattani
Security Specialist @ Secure Network S.r.l.
#penetrationtest
#vulnerabilityassessment
#web #mobile #network
#riskassessment
Penetration Testing Aziendale con BeEF
3. BeEF
The Browser Exploitation Framework
• Creato da Wade Alcorn nel 2005
• Gratuito e Open-Source
• Sviluppo continuo e rilasci mensili
• Sviluppato in Ruby (framework) e in JavaScript (moduli)
– I collaboratori sono sempre benvenuti!
beefproject.com
@beefproject
Penetration Testing Aziendale con BeEF
20. A penetration test is a method of
evaluating the security of a computer
system or network by simulating an
attack.
Source: https://www.owasp.org/index.php/Testing:_Introduction_and_objectives
Penetration Testing Aziendale con BeEF
40. Dillo Anche a Me!
Penetration Testing Aziendale con BeEF
41. Dillo Anche a Me!
Penetration Testing Aziendale con BeEF
42. Dillo Anche a Me!
Penetration Testing Aziendale con BeEF
43. Pronti all’Uso
Numerosi exploit già integrati
Exploit pronti per essere eseguiti
Nuove vulnerabilità Nuovi exploit
Exploit esterni sono facili da integrare
Target: server, router, switch, NAS, etc.
Penetration Testing Aziendale con BeEF
46. Basically, social engineering is the art
and science of getting people to
comply to your wishes.
Harl – “People Hacking: The Psychology of Social Engineering” (1997)
Penetration Testing Aziendale con BeEF
76. • Sviluppato da Rapid7
• Framework per sviluppare ed eseguire exploit
• Diverse versioni, sia gratuite che a pagamento
Integrazione di Metasploit Framework (MSF) in BeEF
Interfaccia web di BeEF per lanciare gli exploit
Accesso diretto a numerosi exploit aggiornati
Usare i browser agganciati come pivot per gli attacchi
Penetration Testing Aziendale con BeEF
97. adminforums.com
getBrowserDetails()
v. 6.0.0M1
Windows XP SP3
Internet Explorer 8
getBrowserPlugins()
MSF Exploit
Adobe Flash Player 10.2.153.1
SWF Memory Corruption
Flash Player
v. 10.2.153.1
Payload
Reverse Meterpreter TCP
Exploit
HEAD Request JSP Shell
Penetration Testing Aziendale con BeEF
98. adminforums.com
getBrowserDetails()
v. 6.0.0M1
Windows XP SP3
Internet Explorer 8
getBrowserPlugins()
Flash Player
v. 10.2.153.1
MSF Exploit
Adobe Flash Player 10.2.153.1
SWF Memory Corruption
Payload
Reverse Meterpreter TCP
Exploit
HEAD Request JSP Shell
Penetration Testing Aziendale con BeEF
> insert command
100. Percorsi Aruba: E-Security
Partecipate ad almeno 2 tra i workshop selezionati da
Aruba e ritirare il vostro attestato.
Penetration Testing Aziendale con BeEF
_______________________
Stand Aruba – Padiglione 2
Penetration Testing Aziendale con BeEF