Tooling Up for Kerberos

Explore the intricacies of Kerberos authentication in this 51-minute conference talk presented by James Forshaw at 44CON 2022. Delve into the world of enterprise network security, focusing on the implications of Kerberos for local machine security and privilege escalation. Learn about the speaker's custom toolset, part of the NtObjectManager PowerShell module, designed to expose the majority of Kerberos functionalities to scripts. Gain insights into the complex nature of Kerberos and discover how these tools can be used to uncover interesting vulnerabilities. Benefit from Forshaw's expertise as a security researcher at Google's Project Zero and his extensive experience in computer hardware and software security. Understand the importance of Kerberos in on-premise Windows enterprise networks and its potential for exploitation in remote access and lateral movement attacks.

James Forshaw - Tooling up for Kerberos