Skip to content
Hallway
0:00 / 0:00

#privilegeescalation#activedirectory#pass-the-hash

Break Me16 Credential Assessment Mapping Privilege Escalation at Scale Matt Weeks

Adrian Crenshaw

40K subscribers • 9 videos on Hallway

YouTube
  • Recommended by 1 person: 1 on Stack Overflow and its sister sites.
  • Presented by Matt Weeks

Advanced. Deep dive for people who know the field.

598 views11 years ago1 recommendation

SecurityExploits and vulnerabilitiesWeb and application security

Matt Weeks discusses techniques for mapping privilege escalation and preventing Pass-the-Hash attacks at scale.

These are the videos from Derbycon 2015: irongeek.com/i.php?page=videos/derbycon5/mainlist

Why it's here

1 person recommends this

What people say. Recommended for its coverage of techniques to prevent Pass-the-Hash, Pass-the-Ticket, and Pass-the-Key attacks.

Moments people linked to

atdreon Information Security Stack Exchange • Recommends

On “Using Two-Factor Authentication to Stop Pass-the-Hash”

Matt Weeks, in his Credential Assessment Mapping Privilege Escalation at Scale talk, discusses many techniques to prevent PtH, PtT, and PtK (OPtH). Starting at 41:50 and up until 48:52, he goes over many prevention angles and gotchas -- link to this video My favorite recommendations are the rotation of KRBTGT weekly, and, if you can utilize smart cards then rotate the user hashes daily. He also speaks about a generic PtH control with blocking inbound NTLM to the domain. The DFIR Blog has an excellent three-part series on many other detections and mitigations -- http://dfir-blog.com/2015/11/08/protecting-windows-networks-defeating-pass-the-hash/ http://dfir-blog.com/2015/11/24/protecting-windo…
6View the answer