I am trying to wrap my head around how exactly delegation works. I needed to abuse RBCD in two boxes, and I did not really grapsed how it worked. You presentations are extremely helpful, thanks for taking the time to make them in English and freely sharing them! Really looking forward to the next 3 videos!
You could write a book on AD security. With your deep knowledge and explanation skills, I believe it would be a hit as there are no such books available in the market yet.
There is a link at the end of the presentation where you can download the web app. Key things of the IIS configs are shown througout the presentation. If you have any question tho, just ask!
@@cactusjuice9709 TGTs are encrypted with krbtgt's secret key. You need to create a keytab (usually using AES256 with the salt) and use it along with wireshark. There is a slide in the "You do (not) Understand Kerberos" deck where you can see how.
![2 - [English] You Do (Not) Understand Kerberos Delegation - Unconstrained Delegation](http://i.ytimg.com/vi/xDFRUYv1-eU/mqdefault.jpg)
![2 - [English] You Do (Not) Understand Kerberos Delegation - Unconstrained Delegation](/img/tr.png)
![[English] You Do (Not) Understand Kerberos](http://i.ytimg.com/vi/4LDpb1R3Ghg/mqdefault.jpg)
![1 - [Spanish] You Do (Not) Understand Kerberos Delegation - Introducción](http://i.ytimg.com/vi/LD_7Sv96x1I/mqdefault.jpg)
Great explanation bro, thank you a lot.
I am trying to wrap my head around how exactly delegation works. I needed to abuse RBCD in two boxes, and I did not really grapsed how it worked. You presentations are extremely helpful, thanks for taking the time to make them in English and freely sharing them!
Really looking forward to the next 3 videos!
You could write a book on AD security. With your deep knowledge and explanation skills, I believe it would be a hit as there are no such books available in the market yet.
Its the Most practical explanation of Kerberos
a juicy explanation man . very well done.
Well done. 🙂
Perfect explanation!
Please can you enable English subtitles for your Spanish videos
Thanks sir 💟💟
Perfect !!
Thank you ،but i need configuration my lab I search in internet but i don't found any resources for lab delegation kerberos
Hi. Have you released the code of the webapplication or the configuration of the IIS? Have a nice day
There is a link at the end of the presentation where you can download the web app.
Key things of the IIS configs are shown througout the presentation. If you have any question tho, just ask!
@@ATTL4S thank you!
@@ATTL4S How you open the cipher part of the delegation TGT in wireshark? Can't see any flags. :)
@@cactusjuice9709 TGTs are encrypted with krbtgt's secret key. You need to create a keytab (usually using AES256 with the salt) and use it along with wireshark. There is a slide in the "You do (not) Understand Kerberos" deck where you can see how.
@@ATTL4S Thank you sir! Even the setup of the lab teach me a lot