Kelly Villanueva

Previously Red team @ Salesforce, SpecterOps & Big4 | Interested in security, puns, and mountains | Opinions my own

@[email protected]

[Kelly Villanueva @kellthenoise]

Here are some Kerberos visuals to describe authentication/authorization and their offensive scenarios
Here are some of the acronyms I used:
- Ticket-Granting-Ticket (TGT)
- domain controller (DC)
- ticket-granting service ticket (TGST)
- krbtgt (Kerberos ticket-granting service)

[Kelly Villanueva @kellthenoise]

I'm on mastodon https://t.co/3R0B64OvKs

Who should I follow?

[Kelly Villanueva @kellthenoise]

@_wald0 @kfosaaen @xorrior @mcohmi @PyroTek3 @424f424f @mariussmellum @BaileyBercik @JefTek https://t.co/3R0B655yMs

[Kelly Villanueva @kellthenoise]

@theevilbit Whoa! Awesome job!!

[Kelly Villanueva @kellthenoise]

@tfschaub Thank you!

[Kelly Villanueva @kellthenoise]

Today is my last day at Salesforce. I'm taking time to focus on myself / my family. In 2 days I'm headed to Nepal, and in October I'll be in Kauai. Any other recommendations during time off? There aren't many opportunities like this in life, so I'm making the most of it!

[Kelly Villanueva @kellthenoise]

@attrc I live in Washington, so I have! But I love the recommendations to go to Hoh and Crescent. If you have any more like that I'd love to hear them 😄

[Kelly Villanueva @kellthenoise]

@Flangvik Thanks 😄

[Kelly Villanueva @kellthenoise]

@james9876545 PowerPoint

[Kelly Villanueva @kellthenoise]

Here are some Kerberos visuals to describe authentication/authorization and their offensive scenarios
Here are some of the acronyms I used:
- Ticket-Granting-Ticket (TGT)
- domain controller (DC)
- ticket-granting service ticket (TGST)
- krbtgt (Kerberos ticket-granting service)

[Kelly Villanueva @kellthenoise]

@0xcsandker Thanks for sharing!

[Carsten @0xcsandker]

Part 2 of my recent journey: Digging into AD Trusts and exploring how these work under the hood.

Part 2. Operational Guidance
Including some tooling to enumerate all reachable AD Trusts and inspecting the contents of Kerberos tickets.

https://t.co/sAvQ4AHGUD

[Kelly Villanueva @kellthenoise]

@theevilbit Have a great time! Can't wait to see the pictures

[Kelly Villanueva @kellthenoise]

Anyone know of all women operation teams? If so, please lmk! I'd love to hear about it 😄

[Kelly Villanueva @kellthenoise]

The last few months I started climbing with women, and all of a sudden I started climbing higher, faster. Like security, women are underrepresented. Here's a 🧵 the differences I see partnering with men and women.

[Kelly Villanueva @kellthenoise]

Probably the biggest difference is that gaps in knowledge or fitness doesn't feel like a burden or problem, instead it's an opportunity for me to get better. The mindset shift helps me get in a better headspace and improve 😄

[Kelly Villanueva @kellthenoise]

The last few months I started climbing with women, and all of a sudden I started climbing higher, faster. Like security, women are underrepresented. Here's a 🧵 the differences I see partnering with men and women.

[Kelly Villanueva @kellthenoise]

Plus it's so special when 2 women who crush give a head nod / acknowledge to 2 other women who crush on a trail. Plus, women always have extra snacks 😏 (except me heh)