"Get-GPTrashFire: Identifying and Abusing Vulnerable Configurations in MS AD Group Policy"

No ratings

Presented at BSidesCanberra 2018 by

Mike Loss

AD Group Policy is a very big gun, and admins shoot themselves in the foot with it all the time. In this talk, l0ss covers the basics of what Group Policy is, what it's for, and how it works, followed by a practical approach to identifying and abusing the most commonly seen mistakes admins make with this under-explored but extremely powerful feature of Microsoft AD. Also, a script to make things easier, because hackers like scripts.