Microsoft CA Exploits: From Misconfigurations to Full Domain Admin Takeover

No ratings

Presented at SaintCon 2024 by

Matt Durrin

In today's cybersecurity landscape, even the smallest misconfigurations can have catastrophic consequences. Join us in this deep dive into the world of Microsoft Certificate Authority (CA) misconfigurations, where we'll expose the hidden vulnerabilities that can turn a single compromised user account into a full domain admin nightmare. This session will guide you through real-world case studies and technical demonstrations, revealing how attackers exploit these common mistakes to gather sensitive network and user data, escalate privileges, and gain persistent access. You'll learn how these oversights occur, the tactics hackers use to exploit them, and most importantly, how your blue team can detect and prevent such attacks. Arm yourself with the knowledge to fortify your CA infrastructure and protect your organization.