The speaker will offer a fresh look at watering hole attacks. Using examples, he will demonstrate the potential benefits an attacker can gain by injecting malicious JS code into legitimate services of an organization. The icing on the cake will be a detailed breakdown of the cyber kill chain that enables the completion of most pentest and red team projects in just a few steps