WEBVTT

00:00:01.640 --> 00:00:05.220
Amazing! I hope you enjoyed the demos of this course. If you got

00:00:05.220 --> 00:00:07.870
interested in this tool and the Kerberos attacks,

00:00:08.140 --> 00:00:10.340
I definitely recommend you checking out the official

00:00:10.340 --> 00:00:14.700
documentation of this tool. In the GitHub, you'll learn about the

00:00:14.700 --> 00:00:16.960
technical details and how this attack works.

00:00:18.440 --> 00:00:21.440
Also, in this course we presented the two most common

00:00:21.440 --> 00:00:23.650
privilege escalation attacks that can be performed with

00:00:23.650 --> 00:00:29.060
Rubeus, but as I mentioned before, this tool can perform several other attacks.

00:00:30.040 --> 00:00:30.650
For example,

00:00:30.660 --> 00:00:33.620
you can use Rubeus to perform a silver ticket attack

00:00:33.750 --> 00:00:35.560
or even a golden ticket attack.

00:00:36.440 --> 00:00:39.440
So, I do recommend you checking out the GitHub page of this project,

00:00:39.440 --> 00:00:41.860
so then you can learn more about those attacks.

00:00:43.340 --> 00:00:46.720
If you got interested in privilege escalation in a red team engagement,

00:00:46.730 --> 00:00:52.500
I can recommend to you a few courses here at Pluralsight. The first one is

00:00:52.500 --> 00:00:56.490
Credential Access with Responder, and with this tool you'll be able to

00:00:56.490 --> 00:00:58.560
harvest tons of credentials in the environment,

00:00:58.940 --> 00:01:01.550
allowing you to move laterally and escalate privileges.

00:01:02.940 --> 00:01:06.200
The second course I recommend to you is the Post Exploitation with

00:01:06.210 --> 00:01:09.480
Meterpreter, which is about automating your post exploitation

00:01:09.480 --> 00:01:12.160
activities using Metasploit and Meterpreter.

00:01:13.040 --> 00:01:16.730
It will teach you how to get local admin privileges using the Meterpreter

00:01:16.730 --> 00:01:22.020
tool. Also, if you're wondering how you can prevent people from using those

00:01:22.020 --> 00:01:26.220
Kerberos attacks against your company, I have a few suggestions to you.

00:01:26.220 --> 00:01:31.810
First, adopt really strong passwords for service accounts, and I say that

00:01:31.820 --> 00:01:35.260
because even if an attacker is able to steal the hash passwords of your

00:01:35.260 --> 00:01:38.760
accounts, they will not be able to brute force the password if it is really

00:01:38.760 --> 00:01:39.350
complex.

00:01:40.740 --> 00:01:42.130
Also, related to that,

00:01:42.140 --> 00:01:46.990
I do recommend you using a password management tool for a service account. In

00:01:46.990 --> 00:01:52.520
this way, you can ensure that you have strong and secure passwords. And also

00:01:52.520 --> 00:01:55.550
really important, always adopt secure configurations.

00:01:56.440 --> 00:01:57.130
For example,

00:01:57.140 --> 00:02:01.350
the AS‑REP Roasting attack that we saw early was only possible because the

00:02:01.360 --> 00:02:03.960
administrator had an insecure configuration on his system.

00:02:04.640 --> 00:02:07.390
So having strong security standards minimizes the

00:02:07.390 --> 00:02:09.350
chances of those attacks being successful.

00:02:11.940 --> 00:02:12.910
So that's it.

00:02:12.920 --> 00:02:14.660
That's the end of our Rubeus course.

00:02:15.240 --> 00:02:18.050
I hope you enjoyed this course, and that now you have one more

00:02:18.050 --> 00:02:20.550
privilege escalation technique in your skillset.

00:02:21.140 --> 00:02:23.360
Thank you for watching, and I'll see you in the next course.