Fabian Gonzalez

Team Leader & Senior Penetration Tester, Oneconsult

After completing his apprenticeship in information technology with a focus on systems engineering, Fabian Gonzalez studied information technology at the University of Applied Sciences Rapperswil and graduated with a BSc FH degree in computer science. He then worked at an auditing company as an information security consultant. In January 2016, Fabian Gonzalez joined Oneconsult as a penetration tester where he currently works as Senior Penetration Tester and Team Leader and conducts penetration tests with a special focus on client/server applications, IoT devices, and red teaming simulations.

All Sessions by Fabian Gonzalez

  • Scenario 1 (Sponsors)


  • 13:55  - 14:25
    Third-party providers often play a role in today's IT infrastructures. When on-premises solutions are used, the hardware and the base operating system are often managed centrally by the internal IT team. Third-party applications, however, are maintained and configured by an external provider. In such cases, the external provider often has administrative access to some company's servers, which leads to technical risks that should be taken into account.
    This talk will address several attacks targeting the Windows Active Directory based on common Windows server configurations that can be performed by a third-party provider with such access rights. Moreover, further recommendations on how to harden such a setup and mitigations will be provided.




Share

Fabian Gonzalez