/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 foxglovesecurity.com
Hot Potato - Windows Privilege Escalation
| | blog.0patch.com
0patch Blog: Micropatching the "PrinterBug/SpoolSample" - Another Forced Authentication Issue in Windows
3.5 parsecs away

Travel
| | by Mitja Kolsek, the 0patch Team Forced authentication issues (including NTLM relaying and Kerberos relaying) are a silent elephant in the...
| | bogs.io
bogs.io | Attacking SMB
2.4 parsecs away

Travel
| | An extensive walk-through the popular methods of exploiting SMB using tools such as Metasploit, Reponder, psexec
| | shenaniganslabs.io
Airstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316) | Shenanigans Labs
1.8 parsecs away

Travel
| | By default, domain joined Windows workstations allow access to the network selection UI from the lock screen. An attacker with physical access to a locked device with WiFi capabilities (such as a laptop or a workstation) can abuse this functionality to force the laptop to authenticate against a rogue access point and capture a MSCHAPv2 challenge response hash for the domain computer account. This challenge response hash can then be submitted to crack.sh to recover the NTLM hash of the computer account in less than 24 hours. Once recovered, this NTLM hash combined with the domain SID can be used to forge Kerberos silver tickets to impersonate a privileged user and compromise the host. An example of this is to create a silver ticket for the CIFS service of the...
| | adsecurity.org
» PowerShell Code: Check KRBTGT Domain Kerberos Account Last Password Change » Active Directory Security
21.1 parsecs away

Travel
| [AI summary] A PowerShell script is presented to discover and list KRBTGT accounts in an Active Directory forest, specifically revealing when their passwords were last changed.