DEF CON 33 - Turning your Active Directory into the attackers C2.
TL;DR: GPOs can turn Active Directory into a powerful C2 primitive. This talk dives into GPO internals, enumeration, persistence, privilege escalation, and advanced exploitation techniques.
During an engagement, and in an effort to bypass Crowdstrike, I figured out a new method to locally privilege escalate when having code execution as a Microsoft Virtual account using only a LoLbin(certreq) and some AD-CS magic.
I was successfully able to compromise the target with Crowdstrike present without needing to use potatoe class exploits. I wrote a blog about it here! https://t.co/zywdv2ZQzN
@BonesawMD I struggled a lot for the first two years in my career because I couldn’t be creative in my work. I changed to a more specialized part of my industry that rewards creativity and I’ve done numbers