06.08.2016 Views

Beyond the MCSE Red Teaming Active Directory

DEFCON-24-Sean-Metcalf-Beyond-The-MCSE-Red-Teaming-Active-Directory

DEFCON-24-Sean-Metcalf-Beyond-The-MCSE-Red-Teaming-Active-Directory

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Trusts<br />

• Connection between domains or forests to<br />

extend au<strong>the</strong>ntication boundary (NTLM &<br />

Kerberos v5).<br />

• Exploit a trusted domain & jump <strong>the</strong> trust<br />

to leverage access.<br />

• Privilege escalation leveraging an exposed<br />

trust password over Kerberos<br />

(ADSecurity.org).<br />

| @PryoTek3 | sean @ adsecurity.org |

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!