Pen Test Partners

AUGUST 24, 2023

With that in mind, and for those that weren’t able to attend, here’s a follow-up blog post. Accounts are susceptible to user spoofing when providing Kerberos tickets to *nix based services joined to an Active Directory realm. This is usually facilitated through the MIT or Heimdal Kerberos stacks.

DNS 52

DNS Authentication Accountability Passwords 52

NopSec

MAY 17, 2022

Introduction Within most enterprise environments, authentication is handled by a central system known as the domain controller. Active Directory implements two (2) primary protocols for authentication — NTLM and Kerberos. NTLM is a legacy protocol and has been superseded by Kerberos.

Authentication 52

Authentication Passwords Accountability Encryption 52

Security Boulevard

JULY 19, 2022

Welcome to my new blog series, “On Detection: Tactical to Functional,” where I intend to explore and expand my understanding of that which we attempt to detect. Maybe this would be a threat report, or maybe it is a blog post, but either way, a good source document should include the specific commands that were used.

Authentication 64

Authentication Information Security Engineering InfoSec 64

Security Boulevard

APRIL 13, 2022

To prevent the attack techniques noted in this blog post, disable the “Allow connection fallback to NTLM” client push installation setting, which is enabled by default in SCCM. SharpSCCM is a tool that can be used to demonstrate that this attack is possible against the current version of Microsoft Endpoint Configuration Manager (ConfigMgr).

Authentication 52

Authentication Accountability Penetration Testing Software 52