Phil Keeble
Red Team Lead at NetSPI
Phil is a red team lead at NetSPI, specialising in leading TLRT frameworks such as TIBER. Phil previously spoke at BlackHat Asia for the release of SCCM and WSUS tooling, and has specialised in many fields including red teaming, mainframes and DevOps.
11:25 - 11:45
19 September 2025 Talks
Compromising backups for fun and profit
In this talk the attack surface of Veeam and Rubrik will be explored. Veeam and Rubrik are two very common domain backup solutions with various components and they are a guaranteed critical objective for red teamers. Some ways of compromising them will be explored and a new BOF will be discussed for the decryption of credentials which allowed for our red team to pivot through a tightly secured red forest recently by owning Veeam. Rubrik will also be explored as an alternate option to see how it is structured and explore possibilities.