The Art of Breaking and Entering by Jesper Larsson | PyConSe | 2024

A Year in the Life of a Penetration Tester In the world of penetration testing, success is as much about creativity and intuition as it is about technical prowess. Over the past year, I’ve had the opportunity to dive deep into a range of systems, from enterprise networks to cloud environments, uncovering vulnerabilities that might seem invisible at first glance. This talk will take you behind the scenes of my journey as a penetration tester, blending the science of structured exploitation with the art of thinking outside the box. This talk will highlight a finding from the past year involving a long attack chain in a financial system, starting with a minor misconfiguration in a GitHub Action. This small flaw allowed privilege escalation, lateral movement, and eventually full backend access, showcasing how seemingly minor vulnerabilities can unravel an entire system. https://pretalx.com/pyconse-2024/talk/Q9MRZC/ #pyconse #pyconse2024