In this video, I will explore the DFSCoerce tool and how to use it to escalate to complete Active Directory takeover. I will show multiple detection methods for this type of attack and show a simple mitigation step that is effective in blocking ADCS relay attacks.
DFSCoerce Tool
[ Ссылка ]
NVISO DCSync/DCShadow Suricata Rules
[ Ссылка ]
Microsoft NTLM Relay Attack Against ADCS Recommendations
[ Ссылка ]
FollowMe:
Twitter @BriPwn
-~-~~-~~~-~~-~-
Please watch: "Red Team Tips February 1st: OPSEC Safe Active Directory Enumeration with SilentHound "
[ Ссылка ]
-~-~~-~~~-~~-~-
![](https://s2.save4k.ru/pic/o_fCcFcZzMg/maxresdefault.jpg)