Delegate to the Top - Abusing Kerberos for Arbitrary Impersonations and RCE

Explore the intricacies of delegation in Windows networks through this 40-minute Black Hat conference talk. Delve into how delegation allows services to impersonate users or computers for network-wide resource access. Uncover potential security vulnerabilities as speaker Matan Hart demonstrates how Kerberos delegation can be exploited for arbitrary impersonations and remote code execution. Gain insights into the core management concept of delegation and its implementation in Windows environments. Learn about the security implications of shifting decision-making authority and empowering subordinates in organizational hierarchies. Understand the risks associated with improper delegation configurations and discover techniques to identify and mitigate potential threats in your network infrastructure.