filmov
tv
Domain Persistence - Golden Certificate
Показать описание
Retrieving the CA certificate could allow a threat actor to forge and sign certificates for any domain user on the domain including domain machine accounts for domain persistence. The most critical machine account is the the one the belongs to the Domain Controller.
The forged certificate can then be used to request a Kerberos ticket from the KDC and utilize this ticket with pass the ticket on any host.
Using the DCSync technique the NTLM hash of the domain administrator can be retrieved which can be used with pass the hash to establish a session with the domain controller or via WMI.
The forged certificate can then be used to request a Kerberos ticket from the KDC and utilize this ticket with pass the ticket on any host.
Using the DCSync technique the NTLM hash of the domain administrator can be retrieved which can be used with pass the hash to establish a session with the domain controller or via WMI.
0:02:17
Domain Persistence - Golden Certificate
0:05:19
PowerShell for Pentesters - Golden Ticket Persistence
1:12:04
Domain Persistence: Detection, Triage, and Recovery
0:34:53
Certified Pre-Owned: Abusing Active Directory Certificate Services
0:51:40
Let the Children play - Leveraging ADCS for persistence in Parent-Child configured forests
0:45:26
Domain Persistence: Detection, Triage, and Recovery - Josh Prager & Nico Shyne [SO-CON 2024]
0:37:51
Hunting for Active Directory Persistence
0:40:19
ReCertifying Active Directory Certificate Services
0:44:25
Domain Persistence- Detection, Triage, and Recovery - Joshua Prager
0:00:32
When you first time install Kali linux for hacking 😄😄 #hacker #shorts
0:00:25
what it’s like to work at GOOGLE…
0:50:05
BSidesNYC 2024 - Detection and Triage of Domain Persistence
0:16:14
Hacking a Domain Controller
0:27:12
How Hackers Persist & Privesc in Microsoft 365
0:49:00
Red Vs. Blue: Modern Active Directory Attacks, Detection, And Protection
0:00:16
The resume structure that got me my dream job | Wonsulting
0:00:37
How to greet the interviewer? | Interview Tips
1:00:14
SANS Webcast: Dominating The Active Directory
0:46:38
SANS Webcast: Kerberos & Attacks 101
0:04:21
Top 6 Most Popular API Architecture Styles
0:05:49
Attack Tutorial: How Silver Ticket Attack Works
1:27:36
Persisting AD - Part 1 [Active Directory Hacking] -- TryHackMe LIVE!
0:40:43
My Cloud is APT's Cloud: Investigating and Defending Office 365
0:50:15
Watching The Watchdog: Protecting Kerberos Authentication With Network Monitoring
Комментарии