Articles liés à Forged Trust: Offensive Operations against Active Directory...
Forged Trust: Offensive Operations against Active Directory Certificate Services - Couverture souple
Synopsis
The definitive offensive reference for Active Directory Certificate Services. Active Directory Certificate Services is one of the most consistently overlooked attack surfaces in enterprise environments. Misconfigured certificate templates, overpermissioned CAs, and weak enrollment controls routinely enable privilege escalation, credential theft, and persistence that survives credential resets - yet most practitioners lack the foundational depth to exploit these paths reliably. Forged Trust documents the complete ADCS attack taxonomy from first principles: ESC1 through ESC18, THEFT1 through THEFT5, PERSIST1 through PERSIST3, and DPERSIST1 through DPERSIST3. Every technique is covered end to end - the misconfiguration root cause, prerequisites, exploitation, and detection artifacts - alongside the KB5014754 enforcement landscape, Shadow Credentials, PKINIT abuse, and certificate-based authentication internals.
What this book covers:
- Full ESC1–ESC18 misconfiguration taxonomy with exploitation walkthroughs
- Certificate theft via Windows Certificate Store, DPAPI, LSASS, and CA database
- PKINIT internals and NT hash extraction via User-to-User Kerberos
- Shadow Credentials and msDS-KeyCredentialLink abuse
- KB5014754 enforcement modes and attack viability matrix
- Certificate-based persistence via PERSIST and DPERSIST chains
- Detection opportunities and event IDs at every stage
Tools covered: Certipy, Certify, Rubeus, Impacket, bloodyAD, Mimikatz, SharpDPAPI, and more.
Les informations fournies dans la section « Synopsis » peuvent faire référence à une autre édition de ce titre.
Résultats de recherche pour Forged Trust: Offensive Operations against Active Directory...
Image d'archives
Forged Trust: Offensive Operations against Active Directory Certificate Services
Vendeur : California Books, Miami, FL, Etats-Unis
Évaluation du vendeur 5 sur 5 étoiles
Etat : New. N° de réf. du vendeur I-9789360120405
Acheter neuf
EUR 26,66
Livraison gratuite
Expédition nationale : Etats-Unis
Expédition nationale : Etats-Unis
Quantité disponible : Plus de 20 disponibles
Image d'archives
Forged Trust (Paperback)
impression à la demandeVendeur : Grand Eagle Retail, Bensenville, IL, Etats-Unis
Évaluation du vendeur 5 sur 5 étoiles
Paperback. Etat : new. Paperback. The definitive offensive reference for Active Directory Certificate Services. Active Directory Certificate Services is one of the most consistently overlooked attack surfaces in enterprise environments. Misconfigured certificate templates, overpermissioned CAs, and weak enrollment controls routinely enable privilege escalation, credential theft, and persistence that survives credential resets - yet most practitioners lack the foundational depth to exploit these paths reliably. Forged Trust documents the complete ADCS attack taxonomy from first principles: ESC1 through ESC18, THEFT1 through THEFT5, PERSIST1 through PERSIST3, and DPERSIST1 through DPERSIST3. Every technique is covered end to end - the misconfiguration root cause, prerequisites, exploitation, and detection artifacts - alongside the KB5014754 enforcement landscape, Shadow Credentials, PKINIT abuse, and certificate-based authentication internals. What this book covers: Full ESC1-ESC18 misconfiguration taxonomy with exploitation walkthroughsCertificate theft via Windows Certificate Store, DPAPI, LSASS, and CA databasePKINIT internals and NT hash extraction via User-to-User KerberosShadow Credentials and msDS-KeyCredentialLink abuseKB5014754 enforcement modes and attack viability matrixCertificate-based persistence via PERSIST and DPERSIST chainsDetection opportunities and event IDs at every stageWritten for red teamers, adversary simulation operators, and security researchers who need to understand certificate infrastructure attacks deeply enough to execute them reliably - not just run a tool and read the output. Tools covered: Certipy, Certify, Rubeus, Impacket, bloodyAD, Mimikatz, SharpDPAPI, and more. This item is printed on demand. Shipping may be from multiple locations in the US or from the UK, depending on stock availability. N° de réf. du vendeur 9789360120405
Acheter neuf
EUR 29,61
Livraison gratuite
Expédition nationale : Etats-Unis
Expédition nationale : Etats-Unis
Quantité disponible : 1 disponible(s)
Image d'archives
Forged Trust
Vendeur : PBShop.store US, Wood Dale, IL, Etats-Unis
Évaluation du vendeur 5 sur 5 étoiles
PAP. Etat : New. New Book. Shipped from UK. Established seller since 2000. N° de réf. du vendeur L2-9789360120405
Acheter neuf
EUR 30,17
Livraison gratuite
Expédition nationale : Etats-Unis
Expédition nationale : Etats-Unis
Quantité disponible : Plus de 20 disponibles
Image d'archives
Forged Trust
Vendeur : PBShop.store UK, Fairford, GLOS, Royaume-Uni
Évaluation du vendeur 5 sur 5 étoiles
PAP. Etat : New. New Book. Shipped from UK. Established seller since 2000. N° de réf. du vendeur L2-9789360120405
Acheter neuf
EUR 25,92
Expédition à EUR 5,93
Expédition depuis Royaume-Uni vers Etats-Unis
Expédition depuis Royaume-Uni vers Etats-Unis
Quantité disponible : Plus de 20 disponibles
Image d'archives
Forged Trust (Paperback)
impression à la demandeVendeur : CitiRetail, Stevenage, Royaume-Uni
Évaluation du vendeur 5 sur 5 étoiles
Paperback. Etat : new. Paperback. The definitive offensive reference for Active Directory Certificate Services. Active Directory Certificate Services is one of the most consistently overlooked attack surfaces in enterprise environments. Misconfigured certificate templates, overpermissioned CAs, and weak enrollment controls routinely enable privilege escalation, credential theft, and persistence that survives credential resets - yet most practitioners lack the foundational depth to exploit these paths reliably. Forged Trust documents the complete ADCS attack taxonomy from first principles: ESC1 through ESC18, THEFT1 through THEFT5, PERSIST1 through PERSIST3, and DPERSIST1 through DPERSIST3. Every technique is covered end to end - the misconfiguration root cause, prerequisites, exploitation, and detection artifacts - alongside the KB5014754 enforcement landscape, Shadow Credentials, PKINIT abuse, and certificate-based authentication internals. What this book covers: Full ESC1-ESC18 misconfiguration taxonomy with exploitation walkthroughsCertificate theft via Windows Certificate Store, DPAPI, LSASS, and CA databasePKINIT internals and NT hash extraction via User-to-User KerberosShadow Credentials and msDS-KeyCredentialLink abuseKB5014754 enforcement modes and attack viability matrixCertificate-based persistence via PERSIST and DPERSIST chainsDetection opportunities and event IDs at every stageWritten for red teamers, adversary simulation operators, and security researchers who need to understand certificate infrastructure attacks deeply enough to execute them reliably - not just run a tool and read the output. Tools covered: Certipy, Certify, Rubeus, Impacket, bloodyAD, Mimikatz, SharpDPAPI, and more. This item is printed on demand. Shipping may be from our UK warehouse or from our Australian or US warehouses, depending on stock availability. N° de réf. du vendeur 9789360120405
Acheter neuf
EUR 30,41
Expédition à EUR 43,71
Expédition depuis Royaume-Uni vers Etats-Unis
Expédition depuis Royaume-Uni vers Etats-Unis
Quantité disponible : 1 disponible(s)