https://peertube.eqver.se/videos/watch/c587ab72-013a-4cf3-81a6-c2a381f3ad33 A DEF CON 31 talk introducing a new post-exploitation technique in Windows networks. It allows an attacker to use a victim’s authentication remotely by proxying NTLM or Kerberos through a compromised machine — without admin privileges and without knowing the password. By leveraging SSPI and LSASS, a small agent on the victim’s system forwards the authentication context to the attacker. This enables actions from the attacker’s own machine under the victim’s identity — such as accessing SMB or LDAP services, or performing attacks like Kerberoasting. Fri, 24 Jul 2026 11:34:20 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.eqver.se https://peertube.eqver.se/client/assets/images/icons/icon-512x512.png https://peertube.eqver.se/videos/watch/c587ab72-013a-4cf3-81a6-c2a381f3ad33 All rights reserved, unless otherwise specified in the terms specified at https://peertube.eqver.se/about and potential licenses granted by each content's rightholder.