/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 adsecurity.org
Beyond Domain Admins - Domain Controller & AD Administration - Active Directory & Azure AD/Entra ID Security
| | www.hub.trimarcsecurity.com
Primary Group Behavior, Reporting and Exploitation
3.2 parsecs away

Travel
| | IntroductionIf you've administered Active Directory (AD) for any significant time, chances are you've come across the primaryGroupID attribute. Originally developed as a method for AD to support POSIX-compliant applications, the attribute has been better known by a different name: An Attack Vector. Commonly referenced in a DCShadow attack, an adversary can set a user's primaryGroupID to 512 (Domain Admins) and effectively become a member of that group. One of the post important concepts to gras
| | www.labofapenetrationtester.com
Lab of a Penetration Tester: RACE - Minimal Rights and ACE for Active Directory Dominance
4.0 parsecs away

Travel
| | Home of Nikhil SamratAshok Mittal. Posts about Red Teaming, Offensive PowerShell, Active Directory and Pen Testing.
| | njmulsqb.github.io
The Blitzkrieg Effect: Infiltrating an Enterprise Active Directory Environment Twice | root@najam~#
3.3 parsecs away

Travel
| | Explore real-world insights from a successful penetration test on an enterprise Active Directory environment. Learn how the domain controllers were compromised within just a few hours using multiple attack vectors. From initial recon to privilege escalation and lateral movement, this case study offers a comprehensive guide to Active Directory security weaknesses and how to fortify them.
| | www.binovarghese.com
Session and token authentication
22.2 parsecs away

Travel
| Session and token authentication methods are used by the server to verify the client request is authenticated or not.