So You Think Your Domain Controller is Secure?

Presented at DEF CON 21 (2013), Aug. 2, 2013, 3:30 p.m. (20 minutes)

Domain Controllers are the crown jewels of an organization. Once they fall, everything in the domain falls . Organizations go to great lengths to secure their domain controllers, however they often fail to properly secure the software used to manage these servers.

This presentation will cover unconventional methods for gaining domain admin by abusing commonly used management software that organizations deploy and use.


Presenters:

  • Justin Hendricks - Security Engineer, Microsoft
    Justin Hendricks works on the Office 365 security team where he is involved in red teaming, penetration testing, security research, code review and tool development.

Links:

Similar Presentations: