No Hash? No Problem! - ASERepCatcher
Intro: Credentials Are Currency In penetration testing, credentials are like currency. It doesn't matter where they come from, it can be from dark web dumps or captured network traffic, we are always chasing that initial foothold. When valid credentials land in our hands, it opens the doors to ...
Continue Reading
Paths to Power in Active Directory Part 5: ESC6 - Under a False Sigil
In Part 3, ESC2: The Seal of Any Purpose, we shifted from identity to capability. Instead of ...
Continue Reading
Paths to Power in Active Directory Part 4: ESC3 – In The Name of The Crown
In Part 2, ESC1: No One, Yet Everyone, we examined a misconfiguration that allows a low-privileged ...
Continue Reading
Paths to Power in Active Directory Part 3: ESC2 – The Seal of Any Purpose
" Power in Active Directory, much like power in Westeros, often changes hands not through force, ...
Continue Reading
Paths to Power in Active Directory Part 2: ESC1 – No One, Yet Anyone
This is the second post in this series. Part 1 can be found here.
Continue Reading
Paths to Power in Active Directory Part 1: How AD CS Misconfigurations Become the Keys to the Kingdom
An Introduction to Active Directory Certificate Services (AD CS) I am still pretty new to ...
Continue Reading
Mitigating Exploitation Risks in Active Directory Certificate Services
A recent pentest of an Active Directory environment turned into a struggle to uncover an avenue for ...
Continue Reading
Computers are People Too
There are those rare times during pentests, when you are on a client's network and you don't have ...
Continue Reading