In this workshop, you’ll get an overview of Kerberos based on a section straight from Red Siege’s Offense for Defense (O4D) course and another excerpt from the new Pen Testing: Beyond the Basics class.

We’ll cover what Kerberos is, and how to attack it. You’d work through a hands on lab exercise involving Kerberoasting (Tim’s baby), the silver ticket attack, and the golden ticket attack.

Syllabus

Examine how Active Directory and Kerberos work to provide authentication and authorization
Windows Domain and Kerberos – Nearly every organization uses Active Directory (AD). No penetration testing workshop or course would be complete without a deep dive into identifying issues in AD, and abusing those issues for privilege escalation, lateral movement, and persistence.
Discuss real world, high-impact attacks used by threat actors to abuse Kerberos, such as
- Kerberoasting
- Silver Ticket Attack
- Golden Ticket Attacks
- Overpass-the-Hash
- Pass-the-Ticket
- Kerberos Delegation Issues
The workshop includes two hands-on lab exercises
- Kerberoasting and Silver Ticket Attack
- Golden Ticket Attack