BruCON 0x0E

In this workshop, SANS instructor Jean-Francois Maes is going to walk over several tactics on how to compromise organizations from the inside.
Let Jean-Francois guide you on how AD authentication works and how an inside threat can abuse the flow to establish a foothold and potentially escalate privileges.
This workshop will use 3 virtual machines, which cannot be deployed to the cloud so make sure to bring a beefy enough laptop that is able to run three VMS in tandem!

This workshop will cover:
- Introduction to AD authentication (NTLM + Kerberos)
- using responder and impacket to capture credentials and relay them
- Active Directory Certificate Services
- Shadow Credentials