/explore
|
You are here |
www.securitynik.com | ||
| | | | |
blog.ikuamike.io
Introduction After passing my OSCP, I am planning on doing CRTP and CRTO sometime this year. I took the OSCP exam before the updates that are focused on Active Directory so I didn't actively focus on this area. So to learn and practice on AD and Windows and also as some prep for the certifications I plan on taking, I will be doing some machines that are AD related and try to get into the details of the included misconfigurations and vulnerabilities. |
|
| | | | | ||
| | | | |
adsecurity.org
[AI summary] This technical article provides a comprehensive overview of Kerberos authentication, explaining its symmetric and asymmetric key principles, the role of Active Directory components, the ticket grant process, and specific security implications like clock skew tolerances. |
|
| | | | | ||
| | | | |
0xdf.gitlab.io
Active was an example of an easy box that still provided a lot of opportunity to learn. The box was centered around common vulnerabilities associated with Active Directory. There's a good chance to practice SMB enumeration. It also gives the opportunity to use Kerberoasting against a Windows Domain, which, if you're not a pentester, you may not have had the chance to do before. |
|
| | | | | ||
| | | | |
www.github.com
Web component to make skeletons. Contribute to mrtrimble/skelly-wc development by creating an account on GitHub. |
|
| | | |||