The tale of Enhanced Key (mis)Usage

One of the commonly recommended solutions to increase the security of user accounts in the on-premise Active Directory is to require two-factor authentication using Smart Cards. Not everyone knows that Windows Smart Card implementation has undergone a significant change years ago that has not been clearly reflected in the publicly available documentation. Since Public Key Infrastructure (PKI) security is not a typical piece of knowledge, therefore many enterprises may be at risk.

Hacking Summer Camp: Sniffing and replaying ADFS claims with Fiddler

Hacking Summer Camp: Memory Analysis Guide, Part 2