Рет қаралды 3,069
In this video, I will explore the DFSCoerce tool and how to use it to escalate to complete Active Directory takeover. I will show multiple detection methods for this type of attack and show a simple mitigation step that is effective in blocking ADCS relay attacks.
DFSCoerce Tool
github.com/Wh0...
NVISO DCSync/DCShadow Suricata Rules
github.com/NVI...
Microsoft NTLM Relay Attack Against ADCS Recommendations
tinyurl.com/2s...
FollowMe:
Twitter @BriPwn
~-~~-~~~-~~-~
Please watch: "Red Team Tips February 1st: OPSEC Safe Active Directory Enumeration with SilentHound "
• Red Team Tips February...
~-~~-~~~-~~-~