BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//hack-lu-2023//speaker//7RVWWZ
BEGIN:VTIMEZONE
TZID:Europe/Luxembourg
BEGIN:DAYLIGHT
DTSTART:20221018T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20221030T030000
RDATE:20231029T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20230326T030000
RDATE:20240331T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Defeating VPN Always-On - Maxime Clementz
DTSTART;TZID=Europe/Luxembourg:20231018T100000
DTEND;TZID=Europe/Luxembourg:20231018T103000
DTSTAMP:20260812T214054Z
UID:pretalx-hack-lu-2023-JXGQJJ@pretalx.com
DESCRIPTION:VPN Always-On is a security control that can be deployed to mo
 bile endpoints that remotely access corporate resources through VPN. It is
  designed to prevent data leaks and narrow attack surface of enrolled end-
 user equipment connected to untrusted networks. When it is enforced\, the 
 mobile device can only reach the VPN gateway and all connections are tunne
 lled.\n\nWe will review the relevant Windows API\, the practicalities of t
 his feature\, look at popular VPN software \; we will then consider ridicu
 lously complex exfil methods and... finally bypass it with unexpectedly tr
 ivial tricks. We will exploit design\, implementation and configuration is
 sues to circumvent this control in offensive scenarios. We will then learn
  how to fix or harden VPN Always-On deployment to further limit the risks 
 posed by untrusted networks.
LOCATION:Salle Europe
URL:https://pretalx.com/hack-lu-2023/talk/JXGQJJ/
END:VEVENT
END:VCALENDAR