Amazing! I hope you enjoyed the demos of this course. If you got
interested in this tool and the Kerberos attacks,
I definitely recommend you checking out the official
documentation of this tool. In the GitHub, you'll learn about the
technical details and how this attack works.
Also, in this course we presented the two most common
privilege escalation attacks that can be performed with
Rubeus, but as I mentioned before, this tool can perform several other attacks.
For example,
you can use Rubeus to perform a silver ticket attack
or even a golden ticket attack.
So, I do recommend you checking out the GitHub page of this project,
so then you can learn more about those attacks.
If you got interested in privilege escalation in a red team engagement,
I can recommend to you a few courses here at Pluralsight. The first one is
Credential Access with Responder, and with this tool you'll be able to
harvest tons of credentials in the environment,
allowing you to move laterally and escalate privileges.
The second course I recommend to you is the Post Exploitation with
Meterpreter, which is about automating your post exploitation
activities using Metasploit and Meterpreter.
It will teach you how to get local admin privileges using the Meterpreter
tool. Also, if you're wondering how you can prevent people from using those
Kerberos attacks against your company, I have a few suggestions to you.
First, adopt really strong passwords for service accounts, and I say that
because even if an attacker is able to steal the hash passwords of your
accounts, they will not be able to brute force the password if it is really
complex.
Also, related to that,
I do recommend you using a password management tool for a service account. In
this way, you can ensure that you have strong and secure passwords. And also
really important, always adopt secure configurations.
For example,
the AS‑REP Roasting attack that we saw early was only possible because the
administrator had an insecure configuration on his system.
So having strong security standards minimizes the
chances of those attacks being successful.
So that's it.
That's the end of our Rubeus course.
I hope you enjoyed this course, and that now you have one more
privilege escalation technique in your skillset.
Thank you for watching, and I'll see you in the next course.