Let's Just Create a New DNS and Keep the Old One, No Big Deal!

This talk will explain the damage that can happen from not removing an old DNS record in the active directory, and simply creating a new one while keeping the old one. In this talk, the speaker will show how can an attacker reach Domain Admin level by abusing this issue and what are the reasons behind it. In addition, mitigations for this issue will also be included in the talk.