The Domain Name System (DNS) is responsible for converting human-readable names into machine-readable Internet Protocol (IP) addresses. In Windows environments where names are intimately tied to identities and authentication, creating and taking over existing DNS records can be a lucrative endeavor that enables coercion and potential relay of NTLM and Kerberos authentication. TL;DR – This…