Collaborate Disseminate
I am solving Tryhackme> Exploiting Active Directory > Task 3. At very last, how new powershell session is opening with the dumped Service Tickets (STs)? He typed this command…
PS> New-PSSession -ComputerName thmserver1.za.tryhac… Continue reading Opening PowerShell (PS) session with STs
Referred to the official microsoft documentation on KCD where they are using the terms KCD & Resource Based Constrained Delegation (RBCD) almost interchangeably which got me confused. They have not mentioned anything related to the dep… Continue reading Is Kerberos Constrained Delegation (KCD) deprecated?
From what I know, it’s a bad practice to login to any workstation or server except domain controllers as a domain admin. I read that mimikatz or other malware can extract the hash of the password from a compromised workstation. What about … Continue reading Are domain admin credentials cached when entered for approving a software installation?
I have a brand new WordPress.org website, so far there isn’t any content uploaded.
The hurdle is that as soon as I install the theme that I payed for, it crashes.
The theme that I payed for (Lezada), includes a year of support.
The support… Continue reading Potential security risks of giving FTP account and wp-admin to Theme Support team on self-hosted wordpress.org site
I am a website developer (mainly using MVC.NET). Recently, we have been contacted by a hacker. He claimed that he knows our admin URL. The problem is we do not publish or put the admin URL anywhere on our webpage. The only place where the … Continue reading How does msnbot keep finding my unpublished admin url?
My colleagues and I are developing a public web application with client and admin access.
I want to prevent the client access being the same as the admin access, meaning the same login interface (at least).
My first idea is to create subdo… Continue reading Prevent client access being the same as admin access in web application
I recently found out that my coworker who is domain admin in a large organization told me that he can monitor all keystrokes of any PCs in the domain he’d like and even he can look at any screen to see what user is up to.
Later I found out… Continue reading Domain admin can monitor all keystrokes. How can I prove that my computer is being targeted? [closed]
I work in a place where system admins can run any EXE on any computers in the building without any logs. In my first years, I didn’t think anything bad would come out from this situation until I realized that one day keylogger injected int… Continue reading How to protect myself from malevolent system admin? [closed]
How do I recover from a calculated near unbelievable cyber hijacking?
It started with my Verizon phone two weeks after a break up. The phone began linking and syncing apps, contacts just everything to his various (textnow app) phone number… Continue reading Former Boyfriend has hijacked my computer systems, software programs and/or network communications [closed]
I am taking over an AD role and one of the tasks I want to accomplish is to "clean up" active directory… remove stale accounts, empty groups, ensure groups have the right users in them.
The domain has a few thousand users.
What… Continue reading Active Directory / Domain spring cleaning best practices [migrated]