Tried and true attack techniques are regularly all we need to get the job done. Sometimes, we have to get creative though. In this talk, we’re going to walk you through several attack paths during recent assessments where we used our creative side and got inventive to do stuff we weren’t supposed to do. Come hear about how we tricked an IDP into giving us super admin permissions, an island hopping campaign to a domain controller, a PDF generator that leaked AWS secret access keys, and more. Along the way, we’ll share our thought process from an offensive and defensive perspective. By the end of the talk, you’ll have some tradecraft to test drive and tips to frustrate your penetration testers and adversaries.