Attack and Detection of DFSCoerce and NTLM relaying ADCS attacks.
In this video, I will explore the DFSCoerce tool and how to use it to escalate to complete Active Directory takeover. I will show multiple detection methods for this type of attack and show a simple mitigation step that is effective in blocking ADCS relay attacks. DFSCoerce Tool https://github.com/Wh04m1001/DFSCoerce NVISO DCSync/DCShadow Suricata Rules https://github.com/NVISOsecurity/nvis... Microsoft NTLM Relay Attack Against ADCS Recommendations https://tinyurl.com/2s3bjkym FollowMe: Twitter @BriPwn ~-~~-~~~-~~-~ Please watch: "Red Team Tips February 1st: OPSEC Safe Active Directory Enumeration with SilentHound " • Red Team Tips February 1st: OPSEC Safe Act... ~-~~-~~~-~~-~
▶︎
ADCS ESC8 Tutorial | Attack Active Directory Certificate Services
▶︎
TR19: Fun with LDAP and Kerberos: Attacking AD from non-Windows machines
▶︎
NTLM Relay Attack Explained | Lateral Movement in Active Directory for Red Teamers
▶︎
Red Vs. Blue: Modern Active Directory Attacks, Detection, And Protection
▶︎
Certified Pre-Owned: Abusing Active Directory Certificate Services
▶︎
Using Velociraptor for Evil
▶︎
Performing SMB Relay Attacks in Active Directory
▶︎
Defeating Windows Defender Obfuscating Open Source Tools
▶︎
Learn Active Directory Kerberoasting
▶︎
Edward Snowden Reveals How They Spy on You
▶︎
Exploiting Outlook CVE-2023-23397 to Relay Credentials
▶︎
1 18 Active Directory Security Beyond the Easy Button Sean Metcalf
▶︎
Windows Domain - Attack & Defense: 02 NTLM Relay
▶︎
Emulating and Detecting Kerberoasting | Red Canary
▶︎
Crash Course, Active Directory, DHCP & DNS for Entry Level Tech Support
▶︎
Kerberos Explained (In 3 Levels Of Detail)
▶︎
ADCS ESC1 Privilege Escalation Tutorial | Attack Active Directory Certificate Services
▶︎
Don't Hang Up On AI Scammers. Do THIS Instead.
▶︎
🔴🔵 Blinding EDR with Windows Filtering Platform
▶︎