/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

adsecurity.org
| | blog.xpnsec.com

Recently I've been trying to make sure that my redteam knowledge is up to date, exploring many of the advancements in Active Directory Kerberos attacks... and there have been quite a few! I finally found some free time this week to roll up my sleeves and dig into the internals of some of these attacks, and hopefully document them for other people to learn. This post is the first in a series aimed at explaining what is happening under the hood when you execute your favourite Powerview or Mimikat
2.0 parsecs

Travel
| |
| | www.tarlogic.com

Kerberos attacks: Kerberos brute-force, ASREPRoast, Kerberoasting, Pass the key, Pass the ticket, Silver ticket and Golden ticket explanation.
1.2 parsecs

Travel
| |
| | zer1t0.gitlab.io


1.2 parsecs

Travel
| |
| | bohops.com

Yes, you read that correctly - "Dynamic Pinvoke" as in "Dynamic Platform Invoke" Background Recently, I was browsing through Microsoft documentation and other blogs to gain a better understanding of .NET dynamic types and objects. I've always found the topic very interesting mainly due to its relative obscurity and the offensive opportunities for defensive evasion....
20.7 parsecs

Travel
|