Video wird geladen...
Video konnte nicht geladen werden
How to own a domain controller in 4 commands 🎫 (in a lab, obviously 🫡) Dump a CIFS ticket with Rubeus Save it as a .kirbi file Pass-the-ticket back with Rubeus dir \\DC\C$ → you're in Kerberos abuse is one of those things that sounds terrifying until you see... show more
18,211 Aufrufe • vor 20 Tagen •via X (Twitter)
4 Kommentare

Just Hacking Training (JHT)vor 20 Tagen
Go @techspence!

Peter Loganvor 19 Tagen
Kerberos ticket abuse is a great reminder that valid credentials don't always mean legitimate access. Understanding pass-the-ticket attacks is essential for securing Active Directory environments.

Pumpkin Securityvor 20 Tagen
four commands and C$ opens. shops still treat PTT like advanced when it's lab day one. you seeing more .kirbi handoffs or tickets pulled straight from memory?

Pumpkin Securityvor 19 Tagen
CIFS ticket to .kirbi to PTT to DC$ is still the cleanest lab demo of why Kerberos abuse feels quiet until it isn't. what's the first Event ID you make juniors hunt after they land that dir?
Ähnliche Videos
1:32
Sensitive content
This is a bonus video to celebrate 15k followers here. You can see in the video how 15k followers were wiped out by unaware Jamie. 😈 The full-version is a 6-min video with SFX and it's free on my Patreon, welcome to check it.
Jamie芥弥
24,916 Aufrufe • vor 1 Jahr

