Cyanatide
Hi!
To test the security of my network (and for my personal culture), I have put http://connect.ed-diamond.com/MISC/MISC-066/Utilisation-avancee-de-Mimikatz in practice.
Sorry, it's in French so here is the purpose in few words: a hacker steal the laptop of your company's collaborator. The hacker note that there is a VPN connection and a certificate, so try to use mimikatz to do an attack pass-the-hash. During this guide, we export the certificate in a DER file and the private key protected by the password mimikatz in a file pfx.
Using these two elements, I try to connect openVPN on my laptop... And it fails on error "TLS Error: local/remote TLS keys are out of sync". Great, my network seems to be protected.
However, I'm wondering how openVPN detects that something goes wrong with this connection... Have you any details regarding the security process used here?
Best regards.
