/explore
|
You are here 
|
blog.xpnsec.com | ||
| | | | |
blog.ikuamike.io
Introduction After passing my OSCP, I am planning on doing CRTP and CRTO sometime this year. I took the OSCP exam before the updates that are focused on Active Directory so I didn't actively focus on this area. So to learn and practice on AD and Windows and also as some prep for the certifications I plan on taking, I will be doing some machines that are AD related and try to get into the details of the included misconfigurations and vulnerabilities. |
|
| | | | | ||
| | | | |
adsecurity.org
[AI summary] A PowerShell script is presented to discover and list KRBTGT accounts in an Active Directory forest, specifically revealing when their passwords were last changed. |
|
| | | | | ||
| | | | |
www.securitynik.com
In this post, I'm learning about Kerberos and one of its attacks. Specifically, I'm learning about Authentication Service Response (AS-REP) ... |
|
| | | | | ||
| | | | |
smsagent.blog
For some time, I've been activating and scheduling activations for Azure roles under Privileged Identity Management (PIM) using the Microsoft Graph PowerShell SDK. However recently we secured these role activations to require a conditional access authentication context with MFA. This basically requires me to MFA when I activate a role with PIM. Problem is, by... |
|
| | | |||
