Join us in-person this July for the first-ever Antisyphon Summer Camp! Register Here

Workshop: Hands on Kerberos with Tim Medin

Course Authored by .

In this workshop, you’ll get an overview of Kerberos based on a section straight from Red Siege’s Offense for Defense (O4D) course and another excerpt from the new Pen Testing: Beyond the Basics class.

Course is currently unavailable.

Course Length: 4 Hours

Includes a Certificate of Completion



Next scheduled date: Content is loading, please wait.

Description

In this workshop, you’ll get an overview of Kerberos based on a section straight from Red Siege’s Offense for Defense (O4D) course and another excerpt from the new Pen Testing: Beyond the Basics class.

We’ll cover what Kerberos is, and how to attack it. You’d work through a hands on lab exercise involving Kerberoasting (Tim’s baby), the silver ticket attack, and the golden ticket attack.

System Requirements
  • Student Requirements:
    • Just a laptop with a browser (Safari will work, but it is not preferred)

Syllabus

    • Examine how Active Directory and Kerberos work to provide authentication and authorization

    • Windows Domain and Kerberos – Nearly every organization uses Active Directory (AD). No penetration testing workshop or course  would be complete without a deep dive into identifying issues in AD, and abusing those issues for privilege escalation, lateral movement, and persistence.

    • Discuss real world, high-impact attacks used by threat actors to abuse Kerberos, such as
        • Kerberoasting

        • Silver Ticket Attack

        • Golden Ticket Attacks

        • Overpass-the-Hash

        • Pass-the-Ticket

        • Kerberos Delegation Issues

    • The workshop includes two hands-o
        • Kerberoasting and Silver Ticket Attack

        • Golden Ticket Attack

FAQ

About the Instructor

Pixel splash background
Tim Medin
Tim Medin
"Hacker, instructor, and Kerberoast Guy"
Bio

Tim is the CEO and founder of Red Siege Information Security. He is the creator of the Kerberoasting. Tim was a Senior Instructor and course author (SEC560) at The SANS Institute. Tim has performed penetration tests on a wide range of organizations and technologiesTim is an experienced international speaker, having presented to organizations around the world.

Shopping Cart

No products in the cart.