filmov
tv
DEF CON 25 - Andy Robbins, Will Schroeder - Designing Active Directory DACL Backdoors
Показать описание
Active Directory (AD) object discretionary access control lists (DACLs) are an untapped offensive landscape, often overlooked by attackers and defenders alike. The control relationships between AD objects align perfectly with the "attackers think in graphs" philosophy and expose an entire class of previously unseen control edges, dramatically expanding the number of paths to complete domain compromise.
While DACL misconfigurations can provide numerous paths that facilitate elevation of domain rights, they also present a unique chance to covertly deploy Active Directory persistence. It's often difficult to determine whether a specific AD DACL misconfiguration was set intentionally or implemented by accident. This makes Active Directory DACL backdoors an excellent persistence opportunity: minimal forensic footprint, and maximum plausible deniability.
While DACL misconfigurations can provide numerous paths that facilitate elevation of domain rights, they also present a unique chance to covertly deploy Active Directory persistence. It's often difficult to determine whether a specific AD DACL misconfiguration was set intentionally or implemented by accident. This makes Active Directory DACL backdoors an excellent persistence opportunity: minimal forensic footprint, and maximum plausible deniability.
0:43:24
DEF CON 25 - Andy Robbins, Will Schroeder - Designing Active Directory DACL Backdoors
0:36:56
DEF CON 25 IoT Village - Andrew Tierney, Ken Munro - IoT From DVRs to Dildos
0:35:02
DEF CON 25 Recon Village - Andrew Hay - An Introduction to Graph Theory for OSINT
0:47:23
DEF CON 25 Crypto and Privacy Village - Andrew Brandt - SSL Visibility Revisted: A Year In Privacy I
0:31:48
DEF CON 25 Wifi Village - Andrew Strutt - Suitcase Repeater Build for UHF 70cm
0:28:35
DEF CON 25 Wifi Village - Andrew Strutt - POCSAG Amateur Pager Network
0:50:06
DEF CON 25 Crypto and Privacy Village - Trey Forgety - Protecting Users' Privacy
0:29:45
DEF CON 29 Recon Village - Andy Dennis - Using Passive DNS for gathering Business Intelligence
0:19:13
DEF CON 25 Recon Village - Kunal Aggarwal - DataSploit Open Source Assistant for OSINT
0:32:39
DEF CON 25 - Matt Knight - Radio Exploitation 101
0:52:51
DEF CON 25 Wifi Village - Nick Delewski - Failsafe: Yet Another SimpliSafe Attack Vector
0:44:21
DEF CON 25 Recon Village - Shane MacDougal - Keynote: Seeing is Believing The Future of Recon
0:21:52
DEF CON 25 Rootz Asylum - David Weinman - Introduction To Cheat Engine
0:25:04
DEF CON 25 Crypto and Privacy Village - Punky Duero - The Key Management Facility of The Root DNSSEC
0:32:54
DEF CON 25 SE Village - Tyler Rosonke - Social Engineering With Web Analytics
0:52:33
DEF CON 25 Crypto and Privacy Village - Jake Williams -The Symantec SSL Debacle Lessons Learned
0:47:03
DEF CON 25 - Inbar Raz, Eden Shochat - From One Country, One Floppy to Startup Nation
0:23:52
DEF CON 25 Car Hacking Village - Vlad Gostomelsky - GPS System Integrity
0:18:52
DEF CON 25 - Josh Datko, Chris Quartier - Breaking Bitcoin Hardware Wallets
0:11:03
DEF CON 25 Recon Village - Dakota Nelson -Total Recoll
0:24:11
DEF CON 25 ICS Village - Arnaud Soullié - Fun with Modbus 0x5a Nothing New Still Relevant?
0:35:12
DEF CON 25 - Steinthor Bjarnason, Jason Jones - The call is coming from inside the house
0:38:56
DEF CON 25 - Svea Eckert, Andreas Dewes - Dark Data
0:30:22
DEF CON 25 - Hanno Bõck - Abusing Certificate Transparency Logs
Комментарии