Kerberos Abuse: A Recap of The Three-Headed Dog, presented by Alberto Jose Rodriguez-Sanchez

UNITED STATES

12.01.2020

Video by Steven Stover 

780th Military Intelligence Brigade (Cyber)

Part of the AvengerCon V presentations cleared for public release: The topic of this presentation will be the most common kerberos abuses within an active directory domain. I plan on doing the following:

1) Explaining Kerberos and how it's used within an Active Directory Environment

2) Dive into some of the exploitation vectors of Kerberos

- AS-REP Roasting
- Kerberoasting
- Golden Tickets
- Silver Tickets
- Unconstrained Delegation Abuse

3) Discuss how to detect these activities and how to minimize the risk

AvengerCon is a free security event hosted every fall by Maryland Innovation and Security Institute to benefit the hackers of the U.S. Cyber Command community and the U.S. Army 780th Military Intelligence Brigade. The event is open to all service members and employees of U.S. Cyber Command and Department of Defense personnel supporting cyberspace missions. AvengerCon features presentations, hacker villages, training workshops, and much more.

The event is open to all service members and employees of U.S. Cyber Command and Department of Defense, and related partners supporting cyberspace missions.

• Date Taken: 12.01.2020
• Date Posted: 10.20.2022 17:10
• Category: Series
• Video ID: 861463
• VIRIN: 201201-O-PX639-880
• Filename: DOD_109279076
• Length: 00:47:35
• Location: US