--- title: "Hacking detected: BSides Canberra" description: See the steps that a white-hat hacker takes to navigate through a network and gain control of it. This is just what Matt Bush, Security Consultant, did to take out the hacking competition at BSides Canberra. image: https://www.themissinglink.com.au/hubfs/News_Images/Hacking-detected.jpg --- [![The Missing Link](https://www.themissinglink.com.au/hubfs/TML-Infy-Core-Logo-RGB-Org%20-%20Edited.png) ](https://www.themissinglink.com.au/) - [Client Portal](https://themissinglink.myportallogin.com.au/) - [Remote Support](https://get.teamviewer.com/themissinglinkqsupport) - [![Call Us](https://www.themissinglink.com.au/hubfs/svgs/tml-phone.min.svg) Call Us ](tel:1300%20865%20865) - [![Support](https://www.themissinglink.com.au/hubfs/svgs/tml-support.min.svg) Support ](tel:1300%20865%20000) - [![The Missing Link](https://www.themissinglink.com.au/hubfs/TML-Infy-Core-Logo-RGB-Org%20-%20Edited.png) ](https://www.themissinglink.com.au/) Search The Missing Link Search - Enable High Contrast - [Client Portal](https://themissinglink.myportallogin.com.au/) - [Remote Support](https://get.teamviewer.com/themissinglinkqsupport) - [![Call Missing Link](https://www.themissinglink.com.au/hubfs/svgs/tml-phone.min.svg) 1300 865 865 ](tel:1300%20865%20865) - [![Phone Missing Link Support](https://www.themissinglink.com.au/hubfs/svgs/tml-support.min.svg) Support 1300 865 000 ](tel:1300%20865%20000) - Cyber Security × Overview Our Cyber Security solutions are designed to keep your business, data, systems, network and users secure. [LEARN MORE](https://www.themissinglink.com.au/cyber-security) [Cyber Security](https://www.themissinglink.com.au/cyber-security) - [ Managed Security Services ](https://www.themissinglink.com.au/managed-security-services) [Security Operations Centre](https://www.themissinglink.com.au/security-operations-centre) [Security Operations Maturity Assessment](https://www.themissinglink.com.au/security-operations-maturity-assessment) [Managed Detection and Response ](https://www.themissinglink.com.au/managed-detection-and-response) [Vulnerability Management as a Service](https://www.themissinglink.com.au/vulnerability-management-as-a-service) [Network Security](https://www.themissinglink.com.au/network-security) [Security Awareness Training](https://www.themissinglink.com.au/security-awareness-training) [ASD Essential 8 as a Service](https://www.themissinglink.com.au/asd8-as-a-service) [Patch Management as a Service](https://www.themissinglink.com.au/patch-management-as-a-service) - [ Specialised Security Services ](https://www.themissinglink.com.au/specialised-security-services) [Data Protection](https://www.themissinglink.com.au/data-protection-unit) [Cloud Security](https://www.themissinglink.com.au/cloud-security-services) [MITRE ATT&CK Coverage Assessment](https://www.themissinglink.com.au/mitre-attck) [Cyber Security Strategy](https://www.themissinglink.com.au/cyber-security-strategy) [Security Professional Services](https://www.themissinglink.com.au/security-professional-services) [Operational Technology Security ](https://www.themissinglink.com.au/operation-technology-security) [Application Security](https://www.themissinglink.com.au/application-security) [Security Controls Review](https://www.themissinglink.com.au/security-controls-review) - [ Governance, Risk and Compliance ](https://www.themissinglink.com.au/cyber-security-risk-and-compliance) - [ Offensive Security Services ](https://www.themissinglink.com.au/offensive-security) [Penetration Testing](https://www.themissinglink.com.au/penetration-testing) [Red Team Testing](https://www.themissinglink.com.au/red-team-testing) [CORIE Readiness](https://www.themissinglink.com.au/corie-readiness-red-team-testing) - [ Security Solutions ](https://www.themissinglink.com.au/security-solutions) [Workforce Security Assessment](https://www.themissinglink.com.au/spectra-alliance-assessment) [Identity](https://www.themissinglink.com.au/identity) [Endpoint](https://www.themissinglink.com.au/endpoint) [Network](https://www.themissinglink.com.au/network) [User Awareness](https://www.themissinglink.com.au/user-awareness) [Application](https://www.themissinglink.com.au/application) - [ Security Training ](https://www.themissinglink.com.au/security-training) [Security Awareness Training](https://www.themissinglink.com.au/security-awareness-training) [Application Security Training](https://www.themissinglink.com.au/application-security-training) - IT & Cloud × Overview Our IT & Cloud solutions are designed to meet your current business requirements and be scalable into the future. [Learn More](https://www.themissinglink.com.au/it-cloud) [IT & Cloud](https://www.themissinglink.com.au/it-cloud) - [ Cloud ](https://www.themissinglink.com.au/cloud-services-solutions) [SmartCLOUD](https://www.themissinglink.com.au/smartcloud) [Public Cloud](https://www.themissinglink.com.au/public-cloud) [Private Cloud](https://www.themissinglink.com.au/private-cloud) [Hybrid Cloud](https://www.themissinglink.com.au/hybrid-cloud) - [ Networking ](https://www.themissinglink.com.au/networking-services) [Unified Communications](https://www.themissinglink.com.au/unified-communications) [Video Conferencing](https://www.themissinglink.com.au/video-conferencing) [Microsoft Teams Calling](https://www.themissinglink.com.au/microsoft-teams-calling) [Internet](https://www.themissinglink.com.au/internet) [Wireless Site Survey](https://www.themissinglink.com.au/wireless-site-survey) [Secure SD-WAN](https://www.themissinglink.com.au/secure-sd-wan) - [ Hardware & Software ](https://www.themissinglink.com.au/hardware-software) [End User](https://www.themissinglink.com.au/end-user) [Data Centre](https://www.themissinglink.com.au/data-centre) [Software](https://www.themissinglink.com.au/software) [Hyper-Converged Infrastructure](https://www.themissinglink.com.au/hyper-converged-infrastructure) - [ Backup & Recovery ](https://www.themissinglink.com.au/backup-recovery) [SmartPROTECT](https://www.themissinglink.com.au/smartprotect) [Disaster Recovery](https://www.themissinglink.com.au/disaster-recovery) [Backup](https://www.themissinglink.com.au/backup) [Cloud Backup](https://www.themissinglink.com.au/cloud-backup) - [ Modern Workplace ](https://www.themissinglink.com.au/modern-workplace) [Microsoft 365](https://www.themissinglink.com.au/microsoft-365) [Remote Working](https://www.themissinglink.com.au/remote-working) [Sharepoint & OneDrive](https://www.themissinglink.com.au/sharepoint-onedrive) [Microsoft Teams ](https://www.themissinglink.com.au/microsoft-teams) [Microsoft Teams Calling](https://www.themissinglink.com.au/microsoft-teams-calling) [Modern Devices](https://www.themissinglink.com.au/modern-devices) [Device Management](https://www.themissinglink.com.au/device-management) [Windows 365](https://www.themissinglink.com.au/windows-365) [Microsoft 365 Copilot](https://www.themissinglink.com.au/ai-automation-services/strategy-planning/m365-copilot-readiness-services) - [ Managed IT Services ](https://www.themissinglink.com.au/managed-it-services) [End User Management](https://www.themissinglink.com.au/end-user-management) [Infrastructure Management](https://www.themissinglink.com.au/infrastructure-management) [Service Desk](https://www.themissinglink.com.au/service-desk) [Patch Management as a Service](https://www.themissinglink.com.au/patch-management-as-a-service) [IT Support](https://www.themissinglink.com.au/it-support) [Managed Networking](https://www.themissinglink.com.au/managed-network-services) - [ IT Consulting & Professional Services ](https://www.themissinglink.com.au/it-consulting-professional-services) [IT Strategy Review](https://www.themissinglink.com.au/it-strategy) [Technology Roadmap](https://www.themissinglink.com.au/technology-roadmap) - AI & Automation × Overview Transform the way you work with AI-powered solutions. [LEARN MORE](https://www.themissinglink.com.au/ai-automation-services) [AI & Automation](https://www.themissinglink.com.au/ai-automation-services) - [ AI Strategy & Planning ](https://www.themissinglink.com.au/ai-automation-services/strategy-planning) - [ AI Training & Adoption ](https://www.themissinglink.com.au/ai-automation-services/training-and-adoption) - [ AI-Powered Automation ](https://www.themissinglink.com.au/ai-automation-services/ai-powered-automation) - Our Company × Overview We aim to provide the technology that will help your business achieve its goals. [Learn More](https://www.themissinglink.com.au/our-story) [Our Company](https://www.themissinglink.com.au/our-story) - [ Our Story ](https://www.themissinglink.com.au/our-story) - [ Leadership Team ](https://www.themissinglink.com.au/leadership-team) - [ Our Culture ](https://www.themissinglink.com.au/our-inclusive-culture) - [ Our Partners ](https://www.themissinglink.com.au/our-partners) - [ Our Clients ](https://www.themissinglink.com.au/our-clients) - [ Our Awards ](https://www.themissinglink.com.au/our-awards) - [ Careers ](https://www.themissinglink.com.au/careers) - [ Well Connected Program ](https://www.themissinglink.com.au/well-connected) - Insights × Overview We take the time to understand your unique business needs and challenges.  Our certified specialists can work with you to find the best solution that suits you. [Learn More](https://www.themissinglink.com.au/contact-us) [Insights](https://www.themissinglink.com.au/news) - [ Blogs ](https://www.themissinglink.com.au/news) - [ Case Studies ](https://www.themissinglink.com.au/case-studies) - [ Security Advisories ](https://www.themissinglink.com.au/security-advisories) - [ Our Resources ](https://www.themissinglink.com.au/our-resources) - [ Our Podcasts ](https://www.themissinglink.com.au/our-podcasts) - [ Our Videos ](https://www.themissinglink.com.au/videos) - [Contact Us](https://www.themissinglink.com.au/contact-us) ![The Missing Link](https://www.themissinglink.com.au/hubfs/TML-Infy-Core-Logo-RGB-Org%20-%20Edited.png) ** - Cyber Security - [Managed Security Services](https://www.themissinglink.com.au/managed-security-services) - [Security Operations Centre](https://www.themissinglink.com.au/security-operations-centre) - [Security Operations Maturity Assessment](https://www.themissinglink.com.au/security-operations-maturity-assessment) - [Managed Detection and Response ](https://www.themissinglink.com.au/managed-detection-and-response) - [Vulnerability Management as a Service](https://www.themissinglink.com.au/vulnerability-management-as-a-service) - [Network Security](https://www.themissinglink.com.au/network-security) - [Security Awareness Training](https://www.themissinglink.com.au/security-awareness-training) - [ASD Essential 8 as a Service](https://www.themissinglink.com.au/asd8-as-a-service) - [Patch Management as a Service](https://www.themissinglink.com.au/patch-management-as-a-service) - [Specialised Security Services](https://www.themissinglink.com.au/specialised-security-services) - [Data Protection](https://www.themissinglink.com.au/data-protection-unit) - [Cloud Security](https://www.themissinglink.com.au/cloud-security-services) - [MITRE ATT&CK Coverage Assessment](https://www.themissinglink.com.au/mitre-attck) - [Cyber Security Strategy](https://www.themissinglink.com.au/cyber-security-strategy) - [Security Professional Services](https://www.themissinglink.com.au/security-professional-services) - [Operational Technology Security ](https://www.themissinglink.com.au/operation-technology-security) - [Application Security](https://www.themissinglink.com.au/application-security) - [Security Controls Review](https://www.themissinglink.com.au/security-controls-review) - [Governance, Risk and Compliance](https://www.themissinglink.com.au/cyber-security-risk-and-compliance) - [Offensive Security Services ](https://www.themissinglink.com.au/offensive-security) - [Penetration Testing](https://www.themissinglink.com.au/penetration-testing) - [Red Team Testing](https://www.themissinglink.com.au/red-team-testing) - [CORIE Readiness](https://www.themissinglink.com.au/corie-readiness-red-team-testing) - [Security Solutions](https://www.themissinglink.com.au/security-solutions) - [Workforce Security Assessment](https://www.themissinglink.com.au/spectra-alliance-assessment) - [Identity](https://www.themissinglink.com.au/identity) - [Endpoint](https://www.themissinglink.com.au/endpoint) - [Network](https://www.themissinglink.com.au/network) - [User Awareness](https://www.themissinglink.com.au/user-awareness) - [Application](https://www.themissinglink.com.au/application) - [Security Training ](https://www.themissinglink.com.au/security-training) - [Security Awareness Training](https://www.themissinglink.com.au/security-awareness-training) - [Application Security Training](https://www.themissinglink.com.au/application-security-training) - IT & Cloud - [Cloud](https://www.themissinglink.com.au/cloud-services-solutions) - [SmartCLOUD](https://www.themissinglink.com.au/smartcloud) - [Public Cloud](https://www.themissinglink.com.au/public-cloud) - [Private Cloud](https://www.themissinglink.com.au/private-cloud) - [Hybrid Cloud](https://www.themissinglink.com.au/hybrid-cloud) - [Networking](https://www.themissinglink.com.au/networking-services) - [Unified Communications](https://www.themissinglink.com.au/unified-communications) - [Video Conferencing](https://www.themissinglink.com.au/video-conferencing) - [Microsoft Teams Calling](https://www.themissinglink.com.au/microsoft-teams-calling) - [Internet](https://www.themissinglink.com.au/internet) - [Wireless Site Survey](https://www.themissinglink.com.au/wireless-site-survey) - [Secure SD-WAN](https://www.themissinglink.com.au/secure-sd-wan) - [Hardware & Software](https://www.themissinglink.com.au/hardware-software) - [End User](https://www.themissinglink.com.au/end-user) - [Data Centre](https://www.themissinglink.com.au/data-centre) - [Software](https://www.themissinglink.com.au/software) - [Hyper-Converged Infrastructure](https://www.themissinglink.com.au/hyper-converged-infrastructure) - [Backup & Recovery](https://www.themissinglink.com.au/backup-recovery) - [SmartPROTECT](https://www.themissinglink.com.au/smartprotect) - [Disaster Recovery](https://www.themissinglink.com.au/disaster-recovery) - [Backup](https://www.themissinglink.com.au/backup) - [Cloud Backup](https://www.themissinglink.com.au/cloud-backup) - [Modern Workplace](https://www.themissinglink.com.au/modern-workplace) - [Microsoft 365](https://www.themissinglink.com.au/microsoft-365) - [Remote Working](https://www.themissinglink.com.au/remote-working) - [Sharepoint & OneDrive](https://www.themissinglink.com.au/sharepoint-onedrive) - [Microsoft Teams ](https://www.themissinglink.com.au/microsoft-teams) - [Microsoft Teams Calling](https://www.themissinglink.com.au/microsoft-teams-calling) - [Modern Devices](https://www.themissinglink.com.au/modern-devices) - [Device Management](https://www.themissinglink.com.au/device-management) - [Windows 365](https://www.themissinglink.com.au/windows-365) - [Microsoft 365 Copilot](https://www.themissinglink.com.au/ai-automation-services/strategy-planning/m365-copilot-readiness-services) - [Managed IT Services](https://www.themissinglink.com.au/managed-it-services) - [End User Management](https://www.themissinglink.com.au/end-user-management) - [Infrastructure Management](https://www.themissinglink.com.au/infrastructure-management) - [Service Desk](https://www.themissinglink.com.au/service-desk) - [Patch Management as a Service](https://www.themissinglink.com.au/patch-management-as-a-service) - [IT Support](https://www.themissinglink.com.au/it-support) - [Managed Networking](https://www.themissinglink.com.au/managed-network-services) - [IT Consulting & Professional Services](https://www.themissinglink.com.au/it-consulting-professional-services) - [IT Strategy Review](https://www.themissinglink.com.au/it-strategy) - [Technology Roadmap](https://www.themissinglink.com.au/technology-roadmap) - AI & Automation - [AI Strategy & Planning](https://www.themissinglink.com.au/ai-automation-services/strategy-planning) - [AI Training & Adoption](https://www.themissinglink.com.au/ai-automation-services/training-and-adoption) - [AI-Powered Automation](https://www.themissinglink.com.au/ai-automation-services/ai-powered-automation) - Our Company - [Our Story](https://www.themissinglink.com.au/our-story) - [Leadership Team](https://www.themissinglink.com.au/leadership-team) - [Our Culture](https://www.themissinglink.com.au/our-inclusive-culture) - [Our Partners](https://www.themissinglink.com.au/our-partners) - [Our Clients](https://www.themissinglink.com.au/our-clients) - [Our Awards](https://www.themissinglink.com.au/our-awards) - [Careers](https://www.themissinglink.com.au/careers) - [Well Connected Program](https://www.themissinglink.com.au/well-connected) - Insights - [Blogs](https://www.themissinglink.com.au/news) - [Case Studies](https://www.themissinglink.com.au/case-studies) - [Security Advisories](https://www.themissinglink.com.au/security-advisories) - [Our Resources](https://www.themissinglink.com.au/our-resources) - [Our Podcasts ](https://www.themissinglink.com.au/our-podcasts) - [Our Videos](https://www.themissinglink.com.au/videos) [Contact Us](https://www.themissinglink.com.au/contact-us) [Our Team.](https://www.themissinglink.com.au/news/tag/our-team) 25.04.18 # Hacking detected: BSides Canberra Just over a week ago some of our security consultants descended on the Security BSides hacker convention in Canberra. With a schedule jam-packed with the intricacies of cyber security, perhaps one of the most-anticipated parts of the convention was Operation Par00t which was a competition to hack a Physical Control Network. Participants started on Friday by connecting through a VPN, WiFi, or ethernet, and then were left to their own hacking devices to navigate their way through the environment and compromise the network. The endgame was taking control of a remote-controlled drone, whoever was able to do that first, would win one. Our Security Consultant, Matt Bush, started Friday afternoon and stopped a short while later. On Saturday morning he got back into it using a variety of Active Directory-related hacking techniques like credential theft, insecure group policy abuse, and pass-the-hash. Some of the more recognisable tools he used were Meterpreter, Mimikatz, Empire, PowerView, the Impacket Python library, and proxychains. Matt was able to: 1. Use spear phishing with a macro-enabled malicious Word document to gain access to the internal subnets hosting the CORP Active Directory domain 2. Escalate to Domain Admin privileges in the CORP domain 3. Compromise a jump box to gain access to a secure network housing the CTRL domain 4. Escalate to Domain Admin privileges in the CTRL domain 5. Locate the drone control server and compromise it 6. Take control of the drone, ultimately winning the competition. It took Matt only 6 hours to reach his goal, finding a severe misconfiguration in Group Policy early on saved him hours of work which none of the other contestants were able to do. Matt achieved the goal with several thousand points ahead of the other contestants (which included hacking teams of up to four people) and was awarded first place. Although this was a controlled scenario, each day people with the same skills as Matt try and compromise networks in the real world. Unfortunately, unlike Matt, they aren’t the good guys. Matt is one of our several OSCP (Offensive Security Certified Professional) accredited staff who make up our security hacking team. Businesses engage our good guys to test the defences of their networks through red teaming, penetration testing and social engineering attacks. These services test your security stack, security team and the security awareness of your employees, discovering whether you’re ready for when the bad guys do come hacking. Remember, as Cisco CEO John Chambers famously said, “There are two types of companies, those that have been hacked and those who don’t know they have been hacked.” If you would like to put your security team to the test you can [request an assessment here. ](https://www.themissinglink.com.au/request-an-assessment) **Author** [The Missing Link](https://www.themissinglink.com.au/news/author/the-missing-link) share [**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.themissinglink.com.au/news/hacking-detected-bsides-canberra) [**](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.themissinglink.com.au%2Fnews%2Fhacking-detected-bsides-canberra) [**](https://www.twitter.com/share?url=https%3A%2F%2Fwww.themissinglink.com.au%2Fnews%2Fhacking-detected-bsides-canberra) ![The Missing Link](https://www.themissinglink.com.au/hubfs/TML-Infy-Core-Logo-RGB-Org%20-%20Edited.png) - Featured Services - [SmartCLOUD](https://www.themissinglink.com.au/smartcloud) - [SmartPROTECT](https://www.themissinglink.com.au/smartprotect) - [Application Security ](https://www.themissinglink.com.au/application-security) - [RPA](https://www.themissinglink.com.au/ai-automation-services/ai-powered-automation/rpa-as-a-service) - [Managed Detection ](https://www.themissinglink.com.au/managed-detection-and-response) - [Managed IT ](https://www.themissinglink.com.au/managed-it-services) - [Cloud Security Services](https://www.themissinglink.com.au/cloud-security-services) - [Managed IT Security](https://www.themissinglink.com.au/managed-security-services) - [Managed IT Sydney](https://www.themissinglink.com.au/managed-it-services-sydney) - [Managed IT Melbourne](https://www.themissinglink.com.au/managed-it-services-melbourne) - Legal - [Terms & Conditions​](https://www.themissinglink.com.au/terms-and-conditions) - [Fair Use Policy](https://www.themissinglink.com.au/fair-use-policy) - [Terms of Use](https://www.themissinglink.com.au/terms-of-use) - [Privacy Policy](https://www.themissinglink.com.au/privacy-policy) - [Acceptable Usage Policy](https://www.themissinglink.com.au/acceptable-usage-policy) - [Cookie Policy](https://www.themissinglink.com.au/cookie-policy) - [Vulnerability Disclosure Policy](https://www.themissinglink.com.au/vulnerability-disclosure-policy) - More - [Contact Us ​](https://www.themissinglink.com.au/contact-us) - [Careers](https://www.themissinglink.com.au/careers) - [Government ​](https://www.themissinglink.com.au/government) - [Sitemap ](https://www.themissinglink.com.au/our-sitemap) ##### Acknowledgement of Country The Missing Link acknowledges the Traditional Owners of the land where we work and live. We pay our respects to Elders past, present and emerging. We celebrate the stories, culture and traditions of Aboriginal and Torres Strait Islanders of all communities who also work and live on this land. ** ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "The Missing Link", "url" : "https://www.themissinglink.com.au/news/author/the-missing-link" }, "dateModified" : "2023-06-02T02:17:34.619Z", "datePublished" : "2018-04-25T23:57:12.000Z", "headline" : "Hacking detected: BSides Canberra", "image" : [ "https://www.themissinglink.com.au/hubfs/News_Images/Hacking-detected.jpg" ], "mainEntityOfPage" : { "@id" : "https://www.themissinglink.com.au/news/hacking-detected-bsides-canberra", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.themissinglink.com.au/hubfs/TML-Infy-Core-Logo-RGB-Org%20-%20Edited.png" }, "name" : "The Missing Link" } } ``` ```json { "@context" : "https://schema.org/", "@type" : "WebSite", "name" : "The Missing Link", "potentialAction" : { "@type" : "SearchAction", "query-input" : "required name=search_term_string", "target" : "https://www.themissinglink.com.au/results{search_term_string}" }, "url" : "https://www.themissinglink.com.au/" } ``` ```json { "@context" : "https://schema.org", "@type" : "Organization", "logo" : "https://www.themissinglink.com.au/hubfs/svgs/TML_Logo-Aust-UK.svg", "name" : "The Missing Link", "sameAs" : "https://www.linkedin.com/company/the-missing-link-pty-ltd/", "url" : "https://www.themissinglink.com.au/" } ```