Intro to PAMSkeletonKey for Persistence w/ Ben Bowman

from BHIS Webcasts · host Black Hills Information Security

How does PAM abuse fit into a real‑world attack chain?🛝 Webcast Slideshttps://www.blackhillsinfosec.com/wp-content/uploads/2026/04/PAM_Tool_Slide_Deck.pdfJoin us for a free one‑hour BHIS webinar with Ben Bowman as he introduces PAMSkeletonKey, a tool designed for red teamers and CTF players to explore persistence, lateral movement, and privilege escalation on Linux systems.Ben will teach why the tool was created, how to use it safely in lab environments, and what this technique means for defenders working to detect or prevent authentication abuse.You'll learn a practical understanding of Linux PAM (Pluggable Authentication Modules) authentication and how it can be abused to create a skeleton‑key backdoor for persistence.Get started with PAMSkeletonKey: https://github.com/her3ticAVI/PAMSkeletonKeyChapters(00:00) - Intro – 2026-04-02 Intro to PAMSkeletonKey for Persistence - Ben Bowman (01:33) - What I Don't Know (02:14) - Remember Mimikatz? Me neither. (03:59) - What is PAM? (04:43) - PAM Architecture Deep Dive (06:54) - PAM Module Types (08:25) - How PAM Authentication Works (12:18) - What does this tell us? (13:44) - What Code Changes Do We Make? (17:28) - Pivoting & Attack Scenarios (18:57) - The Topic of Stolen Valor (21:14) - The Improvements (25:50) - Demo Time (41:57) - References (45:39) - Q&A (59:00) - Antisyphon Training's New LMS Walk Through Creators & Guests Ben Bowman - Guest Logan Bender - Guest Ryan Poirier - Producer Brett Jones - Guest John Strand - Host Chat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhisin the #🔴live-chat channel🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.comBrought to you by:Black Hills Information Security https://www.blackhillsinfosec.comAntisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.comClick here to view the episode transcript.

Episode metadata supplied by the publisher feed · Published May 13, 2026

Embed this episode

Attribution link and audio player

NOW PLAYING

Intro to PAMSkeletonKey for Persistence w/ Ben Bowman

0:00 1:07:51

1×

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Share this episode

Similar Episodes

No similar episodes found.

Similar Podcasts

GALLUP® Called to Coach GALLUP® Webcasts GALLUP® Called to Coach is a webcast resource for those who want to help others discover and use their strengths. We have Gallup experts and independent strengths coaches share tactics, insights and strategies to help coaches maximize the talent of individuals, teams and organizations around the world.Being your best self means playing to your strengths at work and everywhere else. Discover your strengths and learn how to use them to thrive with CliftonStrengths® 34. Visit https://www.gallup.com/cliftonstrengths today! FidelityNext Fidelity Canada While navigating an early career in this virtual world, you may be wondering ‘What’s Next?’ FidelityNext is a live webcast and podcast series for post-secondary students, where Fidelity Investments Canada will provide you with the tools you need to navigate your impending careers successfully in today’s landscape. Fidelity Investments Canada has a long history of meeting students directly on campus, and we hope these FidelityNext webcasts and podcasts will bridge that gap and provide you with the information we share during typical sessions on campus. Laidback Bike Report Gary Solomon The Laidback Bike Report is about people. Bent riders ride interesting bikes, go to interesting places and have interesting stories. That's the basis of this monthly podcast which is the audio version of our YouTube webcasts found here: https://goo.gl/CHOOgX. Sure, we'll talk about products and have tips and tricks for you but each month our show is built around an interview. We'll continue to get the personal side from folks adventure riding around the world. We will delve into the minds of industry leaders, shop owners, and event organizers who are hoping to attract your attention with their wares. We'll get them to turn their cameras around and show us their surroundings, facilities, or latest prototype.This is how we hope to make our show worthy of your precious time.We do this broadcast live so that you can have your comments made and questions answered on the spot. This is an interactive endeavor and is not complete without audience participation. Please join us every month as we Henson Trusts & Disability Estate Planning with Ken Pope Ken Pope Audio Library for information Ken Pope has put out to help families who have a child or relative with a disability or special needs, whether in the form of webcasts, radio shows or interviews. In an effort to diversify our resources we’ve created this Podcast channel for people who prefer to tune in and learn while on the go.Common topics include:Disability Estate Planning, Henson Trusts, Powers of Attorney, Guardianship and Substitute Decision Making, ODSP and Tax Credits.

Frequently Asked Questions

How long is this episode of BHIS Webcasts?

This episode is 1 hour and 7 minutes long.

When was this BHIS Webcasts episode published?

This episode was published on May 13, 2026.

Can I download this BHIS Webcasts episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.

URL copied to clipboard!