SiegeCast: Kerberos and Attacks 101
By Justin Connors | August 25, 2020
Click the link!
REGISTRATION IS OPEN!
Welcome back to our next SiegeCast!
On September 15th at 3pm EDT we will be presenting “KERBEROS AND ATTACKS 101”
Want to understand how Kerberos works? Would you like to understand modern Kerberos attacks? Tim Medin ( the creator of Keberoasting ) walks you through how to attack Kerberos with ticket attacks and Kerberoasting. He covers the basics of Kerberos authentication and then shows you how the trust model can be exploited for persistence, pivoting, and privilege escalation. At the conclusion, he discusses defenses for these various attacks.
We encourage you to sign up for this webcast, as well as become part of the Red Siege community discord – https://redsiege.com/discord
Corey Overstreet and Mike Saunders will be in the discord as well answering any questions alongside the discussion.
There, we will be taking our questions and interacting with the community, as well as posting links that coincide with the conversation.
We look forward to seeing you there!
Tim is the Founder and Principal Consultant at Red Siege. Tim is also a Principal SANS Instructor, the SANS MSISE Program Director, and a SANS course author. Tim is the creator of Kerberoasting, a technique to extract Kerberos tickets in order to offline attack the password of enterprise service accounts. Tim holds GWAPT, GPEN, GMOB, GCED, and GCIH certifications and he previously held the CCNA certification.
Mike is a Principal Consultant at Red Siege. Mike has over 25 years of experience in IT and security and has worked in the ISP, financial, insurance, and agribusiness industries. He currently holds the GCIH, GPEN, GWAPT, GMOB, CISSP, and OSCP certifications.
Corey is the Senior Penetration Tester at Red Siege. Corey is a credentialed OSCE, OSCP, and OSEE and has participated as a member of the SECCDC. He has an extensive career as an experienced penetration tester, red team operator, and has been engaged with Fortune 500 organizations across a variety of industries, including financial services, government services, and healthcare.
To continue getting up-to-date information on all of the live events, discussions, educational webcasts, and giveaways – Please subscribe to the Red Siege Email list.