Marek Jílek: Hey ADCS, gimme DA!

This talk covers the basics of Active Directory Certification Services (ADCS), its importance in authentication, and why it is targeted by attackers. It highlights key vulnerabilities, such as template misconfigurations and permission abuse, and their potential impact on security.
Marek Jílek is an ethical hacker specializing in comprehensive cyber resilience testing for companies. He works as a Red Teamer at NN Insurance and as a penetration tester at Captes. His expertise includes Red Teaming, social engineering, and successful participation in various bug bounty programs. Over the past four years, he has reported vulnerabilities to more than 5,000 companies worldwide.