Gaining persistency by abusing advanced authe
Lesser-known persistence mechanisms using Kerberos delegation and advanced authentication abuse.
Summary
Persistence Challenge
Credentials remain favorite targets for advanced attackers, allowing efficient network traversal without exploits. Achieving persistency requires advanced evasion techniques to remain undetected even after discovery.
Traditional Techniques
Past persistency methods using local accounts, Group Policy Objects (GPOs), and skeleton key attacks are discussed and analyzed for modern insufficiency.
Advanced Mechanisms
Comprehensive analysis covers lesser-known persistence mechanisms using non-mainstream methods. Object manipulation and Kerberos delegation represent sophisticated approaches unavailable to casual attackers.
Defensive Strategies
The presentation shows how defenders can secure their environments against advanced persistence threats. Understanding these sophisticated techniques is critical for both offense and defense.
Related talks
Main Track 1·43 min
Andy Robbins, Will Schroeder
Using Active Directory DACL misconfigurations to achieve domain compromise and persistence.
Blue Team Village·37 min
Siyu Zhu
Due to internal environment of Windows domains is always too tolerant, and enterprises are more concerned about border defenses than internal security, the penetration behavior based on Windows Active Directory has be...
Main Track 1·20 min
Dor Azouri
Exploiting Windows BITS service state files to inject jobs and execute code as NT AUTHORITY/SYSTEM.