These attacks are from tooling and guides shared by @_Mayyhem, @garrfoster, @_xpn_, @Raiona_ZA and @DiLomSec1. @vendetce's talk at BHIS is a fantastic intro to the area if you have a spare hour, and was a huge help to me! 2/2

@nikhil_mitt’s talk on bypassing MDI at @brucon is well worth a watch (youtu.be/bzLvOu1awKM). Lots of OPSEC & detection considerations and highlighted a number of gaps I wasn’t aware of!

RedTeamNotes is a side-project I have been playing with recently, with an aim of combining note taking & graphs to help me in things such as RTO or HackTheBox. I have done a little post describing how it works here: http418infosec.com/redteamno…

Best of luck to anyone on the blue side dealing with #Log4Shell, this is going to be around for years. WAF rules cannot be relied on as there are just so many ways of bypassing detections, especially as you can double-obfuscate payloads.

Here is a diagram to represent the ADCS attack paths. AD CS can feel extremely complex, so hopefully this will help some people!

Another post covers a breakdown of the different misconfigurations with the attacks they apply to. 2/3 http418infosec.com/ad-cs-wha…