Mimi who?

<img src="twitter">
<img src="twitter">
<img src="google images">
<img src="google images">

$ whoami

> cesar.silva

Agenda

Kerberos

Windows Goodies

Magic Tools

Demo 1

Demo 2

Kerberos

<img src="google images">

Key Distribution Center [KDC]

<img src="shareicon.net">

Tickets

<img src="vailjazz.org">

Ticket Granting Ticket [TGT]

<img src="google images">

Ticket-granting Service [TGS]

<img src="google images">

RECAP

<img src="google images">

Windows

<img src="pngmart.com">

Handle to Registry KEYS [HKEYS]

<img src="wikipedia">

HKEY LOCAL MACHINE [HKLM]

HKEY/SAM

HKEY/SECURITY

HKEY/SYSTEM

Mimikatz

<img src="google images">

LABS

Demo 1

Pass the Hash [PTH]

DC Presentation

Domain Presentation

Victim Presentation

Bait the Admin

Credential Dump

Attacker Presentation

Pass the hash

enter the DC

Demo 2

Pass the Ticket [PTT]

propagate the magic

Snagg the creds

GET the gold

SAVE the gold

Use the ticket

<img src="microsoft">

Questions?

Made with Slides.com