TROOPERS23: The Power of Coercion Techniques in Windows Environments

Talk by Martin Grottenthaler - June 28th, 2023 at TROOPERS23 IT security conference in Heidelberg, Germany hosted by @ERNW_ITSec
#TROOPERS23 #ITsecurity
troopers.de/troopers23/talks/...
More impressions:
/ wearetroopers
/ ernw_itsec
infosec.exchange/@WEareTROOPERS
infosec.exchange/@ERNW
ernw.de

[@baolam4616]

00:05 🕵 Introduction to powerful Windows coercion techniques 00:50 🔓 PetitPotam for initial access via encryption service 05:00 🖨 PrinterBug abuses print spooler for foothold 10:07 💥 ADCS attack for instant domain admin access 18:41 📧 Outlook vuln to steal user credentials 20:19 🔌 NTLM relay for privilege escalation 27:06 🗝 Abusing machine accounts for lateral movement 31:30 🎫 Kerberos delegation misconfigs for domain admin 39:56 🔒 Mitigations that can stop these attacks 44:32 🏁 Summary - lethal techniques, implement defenses