So You Think Your Domain Controller Is Secure
Justin Hendricks details so You Think Your Domain Controller is Secure.
Summary
Architecture and Background
So You Think Your Domain Controller is Secure?
Vulnerability Analysis
JUSTIN HENDRICKS SECURITY ENGINEER, MICROSOFT Domain Controllers are the crown jewels of an organization.
Exploitation and Demonstrations
Once they fall, everything in the domain falls .
Remediation and Defensive Strategies
Organizations go to great lengths to secure their domain controllers, however they often fail to properly secure the software used to manage these servers. This presentation will cover unconventional methods for gaining domain admin by abusing commonly used management software that organizations deploy and use. Justin Hendricks works on the Office 365 security team where he is involved in red teaming, penetration testing, security research, code review and tool development. Materials:
Related talks
Main Stage·24 min
droogie
Revives Windows null session attacks against modern Active Directory environments, demonstrating significant unauthenticated enumeration capabilities.
Main Stage·36 min
Nikhil Mittal
Introduces RACE, an open-source toolset for persistent Active Directory access using minimal-privilege ACL modifications invisible to most monitoring.
Main Stage·44 min
Marina Simakov
Presents new NTLM relay attack techniques targeting previously protected services in modern Windows environments.