Workshop: Hands on Kerberos with Tim Medin

We’ll cover what Kerberos is, and how to attack it. You’d work through a hands on lab exercise involving Kerberoasting (Tim’s baby), the silver ticket attack, and the golden ticket attack.

Syllabus

• Examine how Active Directory and Kerberos work to provide authentication and authorization
• Windows Domain and Kerberos – Nearly every organization uses Active Directory (AD). No penetration testing workshop or course  would be complete without a deep dive into identifying issues in AD, and abusing those issues for privilege escalation, lateral movement, and persistence.
• Discuss real world, high-impact attacks used by threat actors to abuse Kerberos, such as
  • Kerberoasting
  • Silver Ticket Attack
  • Golden Ticket Attacks
  • Overpass-the-Hash
  • Pass-the-Ticket
  • Kerberos Delegation Issues
• The workshop includes two hands-on lab exercises
  • Kerberoasting and Silver Ticket Attack
  • Golden Ticket Attack

Virtual (May 2nd, 2025)

• May 2nd – 11 AM EST – 4 PM EST

System Requirements:

• Just a laptop with a browser (Safari will work, but it is not preferred)

Audience Skill Level:

• Intermediate