Calling Home, Get Your Callbacks Through RBI

Authored By: Lance B. Cain and Alexander DeMine

Overview

Remote Browser Isolation (RBI) is a security technology which has been gaining popularity for large businesses securing their enterprise networks in recent years. This blog post describes methods that SpecterOps consultants have researched to successfully circumvent this technology during offensive assessments. Following a brief introduction to the technology, we share our firsthand experiences when encountering RBI solutions and techniques the SpecterOps team have employed for establishing command and control (C2) to …

application security assessments blog blog post browser browser isolation businesses calling command and control consultants enterprise enterprise networks home isolation large networks offensive payload penetration testing rbi red team remote browser isolation security security technology social engineering specterops technology web