Red Team Tips: Kerberos Diamond Ticket

[@KhaosShield]

Nice stuff. Would love to see a video or blog on how you have encrypted and made your own changes to obfuscate Rubeus and mimkatz etc 👍🏻👍🏻

[@CyberAttackDefense]

Noted! for your reference 99% of what I did to rubeus is in my defeating windows defender video. The last 1% I have to keep for myself :)

[@KhaosShield]

@@CyberAttackDefense ahhh nice will check it out. Thanks 👍🏻

[@L33tb1nary]

Love your videos. Is there any video where you discuss your Loader which you used for mimidogz?

[@L33tb1nary]

I guess I found it. It should be Huan when I identified the output correctly 😂

[@CyberAttackDefense]

Yep it’s an older slightly custom Huan.

[@L33tb1nary]

@@CyberAttackDefense so is the current stock one been detected by AV?

[@CyberAttackDefense]

@@L33tb1nary in some cases. Still pretty good against most av

[@L33tb1nary]

@@CyberAttackDefense thank you. Gonna give it a try and refactoring bits of the code.

[@bugbounty5870]

How did you run the mimikatz and able to bypass av

[@CyberAttackDefense]

An obfuscated version of mimikatz that’s using a loader.

[@bugbounty5870]

@@CyberAttackDefense thank you. Any video that would help to use obfuscated mimikatz and run loader

[@hiddengo3232]

Please make video on red teaming and mitre attack TTPs

[@CyberAttackDefense]

Hmm can you clarify? Not sure I know what you are looking for. Do you want to map TTPs to Mitre Attack as part of a red team engagement?

[@hiddengo3232]

@@CyberAttackDefense Teach me how to red teaming using c2 server. From initial access to data exfiltration

[@dgoncalo]

@@hiddengo3232 go study man

[@owllwoz1749]

excuse me？why my Rubeus donnot have diamond modle?

[@owllwoz1749]

I found, I download Rubeus that version is 1.4, however , we need 3.5, aaaaaaa

[@CyberAttackDefense]

3.5 for this one

[@owllwoz1749]

Thanks for your reply.@@CyberAttackDefense

[@amarbansode8815]

Why u deleted donut video?

[@CyberAttackDefense]

Sorry pressured by the EDR vendor