DEF CON 31 - A Broken Marriage Abusing Mixed Vendor Kerberos Stacks - Ceri Coburn

The Windows Active Directory authority and the MIT/Heimdal Kerberos stacks found on Linux/Unix based hosts often coexist in harmony within the same Kerberos realm. This talk and tool demonstration will show how this marriage is a match made in hell. Microsoft's Kerberos stack relies on non standard data to identify it's users. MIT/Heimdal Kerberos stacks do not support this non standard way of identifying users. We will look at how Active Directory configuration weaknesses can be abused to escalate privileges on *inux based hosts joined to the same Active Directory authority. This will also introduce an updated version of Rubeus to take advantage of some of these weaknesses.

[@bnk28zfp]

amazing!!! thank you!!!😮

[@theflowpowa42oshow]

I'm the best Monito! Ya heard?

[@iwuvu5940]

Alway good to listen to defcon

[@geroffmilan3328]

*Very* interesting, good work.

[@Coaden0000]

Are you my son one of my kids. I believe you just might fit the boxes except maybe 1 or a few at most lol

[@divtest]

cool

[@crystaldemons207]

If it sees itself self recognized as it own entity it already breached the wall..

[@crystaldemons207]

Enterprise is a self recognized term.

[@crystaldemons207]

Corporate coupons.

[@crystaldemons207]

Vpn breach

[@benkasumpa6246]

May I please get your email sir ,I got many questions