41aefd91428475855ac8a2b29f69edfa

Abstract

This talk demonstrates various tickets that can be used to access any service as any user or gain almost unlimited access to an organization's domain, including devices, files, domain controllers, etc. This access is achieved by retrieving user data stored in Active Directory. Additionally, it explores an alternative method for obtaining similar tickets in a stealthier manner, involving the inclusion of a legitimate, powerful user's PAC in the ticket.

Speaker

TAS

Timing

Starts at Saturday October 21 2023, 04:45 PM. The sessions runs for about 1 hour.

Resources