Look what's new in ...AS2Go 3.0:
This post explains how to execute an ESC1 attack using AS2Go v2.9.
In three out of four Active Directory Security Assessments (ADSA), my colleagues and I identified vulnerabilities in Active Directory Certificate Services (ADCS). Most issues stem from certificate templates that, by default, are secure but become vulnerable due to human misconfigurations.
This discovery prompted me to enhance my script, “Attack Scenario To Go” (AS2Go), by adding a new privilege escalation method and creating this corresponding blog post.
Continue readingFind the best attack based on Victim’s PC Operation System (OS Build) and the current situation
.
This post describes how to prepare the Domain Controller (DC) for the attack scenario with AS2Go v2.6Assuming you already setup an Active Directory you have to do the following steps on your Domain Controller (DC).
This post describes how to prepare the Victim PC for the attack scenario, to run Pass-the-Hash and Pass-the-Tickets attacks against Admin PC.Assuming you already finished lab setup 2/3 and setup an Active Directory join workstation (English OS) you have to do the following steps on your Admin PC.
AS2Go is an acronym for Attack Scenario To Go.
AS2Go is written in PowerShell and goes along the cyber kill chain, with stops at Password Spray, Reconnaissance, Privilege Escalation, Sensitive Data Access & Exfiltration and Domain Compromise.The GIF shows a typical attack along the kill-chain. Starting with stolen credentials and ending with a compromised domain.
I gave this session during the HIP Germany 2022 in October 2022.
Bekanntlich wird das Active Directory bei rund 90 % der aktuellen Cyberangriffe als Angriffsfläche genutzt.
Bekanntlich wird das Active Directory bei rund 90 % der aktuellen Cyberangriffe als Angriffsfläche genutzt.
In meiner Live Demo „Attack Scenario along the Cyber Kill-Chain” zeige ich euch einen typischen Cyberangriff basierend auf den Attack Vektoren:
• Password Spray
• Reconnaissance
• Lateral Movement
• Data Exfiltration & Encryption
• Domain dominance
Here you find my recording, which shows AS2Go v2.1 and my presentation.
In den nächsten fünf Minuten möchte ich ihnen zeigten, wie auch Ihre Zero-Trust Reise beginnen könnte bzw. warum das Zero Trust Model von Microsoft so einzigartig ist.
I hold this session during the HIP Europe 2021 in June 2021.
Learn how to identify and investigate Lateral Movement and how to de-risk LMPs using Microsoft Defender for Identity.
Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.
Learn a “life hack” (brute-force attack a overpass-the-hash attack a pass-the-ticket a domain dominance) and how to identify and investigate Lateral Movement and how to de-risk LMPs using Microsoft Defender for Identity.
Here you find my recording, which shows AS2Go v1.x.
This post describes how to prepare the Victim PC for the attack scenario, to simulate an ransomware attack against the domain controller.Assuming you already finished lab setup 3/3 | Victim PC⬈ you have to do the following steps on your Victim PC.
Herr HoZi 