Enhancing Kerberos Security 🔐

Kerberos is the primary authentication protocol for on-premise Windows enterprise networks. As it's so crucial for enterprise security a lot of research has focused on exploiting it for remote access and lateral movement such as the well known Golden/Silver ticket attacks. Comparatively, little research has been undertaken on the implications of Kerberos for security on the local machine, especially for privilege escalation.This presentation is a deep dive into the inner workings of Kerberos as it applies to local authentication and some of the unusual behaviors to be found within...

By: James Forshaw , Nick Landers

Full Abstract & Presentation Materials: https://www.blackhat.com/us-22/briefings/schedule/#elevating-kerberos-to-the-next-level-26806