In this talk, we'll explore some novel techniques you can use to break and bypass zero trust security controls. We aim to share with you actionable techniques we've explored, orchestrated or defended against in the wild. This goes beyond the basics but looks at thinking outside the box to exploit flaws in how these networks are designed. These networks are often architected to be perfect, but they rarely end up that way due to business needs. We'll share common flaws we've seen in how they are built and how to exploit them as a part of operation.

This should help red teamers explore new potential attack surfaces and confidently target zero trust networks without resorting to malware for initial access in every operation. There'll also be some valuable pointers to fend off common mistakes we see when building out these networks, so there will also be some helpful info for the blue teamers.