Build your own Potato - An exploration of how Windows authentication abuse “actually works"
Build your own Potato - An exploration of how Windows authentication abuse “actually works".
Summary
Explores how Windows authentication abuse techniques such as potato exploits actually work.
Related talks
Briefings·36 min
Baptiste David · Tillmann Oßwald
Windows Hello is the flagship of Microsoft's passwordless strategy.
reverse-engineeringwindowsencryption+3
Briefings·39 min
Garrett Foster
Windows Server Failover Cluster (WSFC) implementations represent a critical yet underexamined attack surface in enterprise environments.
windowsauthenticationlateral-movement+3
Main Stage·45 min
Tamás Jos
Tamás Jos presents a post-exploitation technique to proxy Windows authentication protocols remotely without elevated privileges, enabling full domain takeover.
windowsactive-directoryauthentication+2