Completed
Best Practices and Mitigations
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
I Am AD FS and So Can You - Attacking Active Directory Federated Services
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 Roadmap
- 3 Doug Bienstock - @doughsec
- 4 Austin Baker - @bakedsec
- 5 Active Directory Federated Services
- 6 Building Blocks - Claims Pipeline
- 7 Building Blocks - Security Tokens
- 8 Building Blocks - claims to assertions
- 9 Building blocks - the RP
- 10 Identity Providers and Adapters
- 11 Finding AD FS Proxies
- 12 Target the Weak Links
- 13 Adapt or die
- 14 Windows Internal Database (WID)
- 15 Locating the goods
- 16 Decrypting the SigningToken
- 17 Key Derivation
- 18 Key Decryption
- 19 ADFSDump
- 20 ADFSpoof
- 21 Best Practices and Mitigations
- 22 Responding Appropriately
