Awesome talk from Oliver Lyak in HackTricks Track at RootedCON 2023.
He gave a great introduction to Windows 0 days researching, don't miss it:
youtube.com/watch?v=OuL-7G…

#hacktricks

Exciting news! We're thrilled to announce the amazing speakers for HackTricks track at /RootedCON!
Get ready to hear from some of the brightest minds in the industry: @_johnhammond Oliver Lyak Gabi U. Román Ramírez Arget Giulia Martino Congon4tor Sickrov Luis Buendía Bea Gil

I'm very excited to announce that Oliver Lyak, creator of certipy, the AD CS privesc techniques ECS9&ECS10, researcher of the Windows AD privesc Certifried(CVE-2022–26923)... will be joining me this Wed on twitch.tv/hacktricks_live to explain AD CS techniques with demos!
#hacktricks

Lee Chagolla-Christensen and I give you 'Certificates and Pwnage and Patches, Oh My!' posts.specterops.io/certificates-a… . We clarify some misconceptions we had about AD CS, explain the KB5014754 patch and its implications, and detail some of the awesome AD CS work from people like Oliver Lyak . Enjoy!

Certipy reached 1k stars on GitHub. Let’s celebrate with a brand new version, new research, a forked BloodHound GUI with ADCS support, and many new features, for instance Schannel authentication via LDAPS, SSPI authentication, and much more!

research.ifcr.dk/certipy-4-0-es…

Protect your domain controllers. This is a bad vuln. MSFT patch is available. CVE-2022–26923