Mastering Active Directory Certificate Services (ADCS): NTLM Relay & Petitpotam Attacks Explained

Welcome to Redfox Security! In this deep-dive tutorial, we explore two of the most critical attack vectors targeting Active Directory Certificate Services (ADCS)—NTLM Relay and PetitPotam. These techniques have been used in real-world attacks to gain unauthorized access, escalate privileges, and compromise entire Windows environments. Whether you're a cybersecurity professional, student, or just passionate about Windows security, this video will give you the knowledge and hands-on insight you need. What You’ll Learn: ✓ ADCS Overview – Understand what ADCS is, its components, and its role in Windows-based PKI environments. ✓ NTLM Relay Attacks – See how NTLM relay vulnerabilities are used to target and abuse certificate services. ✓ PetitPotam Exploit – Learn how this attack forces machine authentication to escalate access within ADCS. ✓ Live Demonstration – Watch real-time execution of both attack chains, including setup, exploitation, and impact analysis. ✓ Defense Tactics – Get practical mitigation strategies and configuration tips to secure your ADCS infrastructure. Key Takeaways: ✓ Clear understanding of how ADCS can be compromised ✓ Step-by-step demonstrations of NTLM Relay and PetitPotam ✓ Real-world mitigation strategies and hardening tips Time Stamps: 0:00 Intro 03:57 ADCS Basics 08:56 NTLM Relay Attack 10:46 PetitPotam Attack 14:35 ESC8 Theory 23:11 ESC8 Practical 56:16 ESC8 Prevention 01:01:16 Conclusion Launch your cybersecurity career with our expert-led training: https://academy.redfoxsec.com/ Join the Redfox Security community: https://linktr.ee/redfoxsec Powered by Redfox Cyber Security Pvt. Ltd. Important Note: This video is for educational purposes only. It demonstrates ethical hacking techniques in authorized, controlled environments. Using these methods without documented consent is prohibited and unethical. Disclaimer: Redfox Security is not responsible for any misuse or unauthorized actions by viewers. Who Are We? Redfox Security is a global penetration testing firm with over ten years of cybersecurity experience. We help businesses, from startups to large corporations, protect against threats. Our expert team provides top-tier security consulting services across four countries, dedicated to ensuring your business grows securely. Website: https://redfoxsec.com LinkedIn:   / redfoxsec   Facebook:   / redfoxsec   Instagram:   / redfoxcybersecurity   Twitter: https://x.com/redfoxsec Like, share, and subscribe for more cybersecurity tutorials and attack breakdowns. Stay informed—turn on notifications so you never miss an upload! #ActiveDirectory #ADCS #NTLMRelay #Petitpotam #Cybersecurity #PenetrationTesting #EthicalHacking #SecurityTutorial #WindowsSecurity #ITsecurity #AttackVectors #PrivilegeEscalation #NetworkSecurity #ExploitDemo #SecurityMitigation #ESC8