Will Schroeder: Trusts You Might Have Missed

Over the next few weeks we’re going to announce the 44CON talks and workshops. Don’t forget to get your tickets!

Our fourth announcement is Will Schroeder – Trusts You Might Have Missed

Red teams have been abusing Windows domain trusts for years with great success, but the topic is still under-represented in public infosec discussions. While the community has started to talk more about Active Directory exploitation, there isn’t much information out there discussing domain trusts from an offensive perspective. This talk aims to demystify domain trusts and show how they can be enumerated and abused during the course of an engagement. I’ll conclude with a complex demo showing how to enumerate, visualize, and abuse the trust relationships in an example environment, leading to total domain takeover without throwing a single exploit.

Will Schroeder is a security researcher and red-teamer for Veris Group’s Adaptive Threat Division. He is a co-founder of the Veil-Framework, developed PowerView and PowerUp, is an active developer on the PowerSploit project, and is a co-founder and core developer of the PowerShell post-exploitation agent Empire. He has presented at a number of security conferences on topics spanning AV-evasion, post-exploitation, red teaming, offensive PowerShell, and more.

You can follow Will on Twitter @harmj0y

Details of all of our talks, workshops and speakers are being announced daily. Don’t forget to book your tickets before they’re sold out!