Collaborate Disseminate
I make a system to communicate using Kerberos protocol. I am User A. I type kinit and I take the ticket. That ticket came to my PC from remote KDC. What happens if the PC crashes and the ticket gets corrupted or damaged or en… Continue reading Can a damaged TGT in Keberos access the service?
NTLM (NT LAN Manager) is Microsoft’s old authentication protocol that was replaced with Kerberos starting Windows 2000. It was designed and implemented by Microsoft engineers for the purpose of authenticating accounts between Microsoft Windows mac… Continue reading The Security Risks of NTLM: Proceed with Caution
I’ve noticed that there is an option to set “Trust this user for delegation to any service” that can be set for service users. I’ve read a lot about unconstrained delegation with regards to computers but haven’t seen users me… Continue reading Kerberos unconstrained delegation for user
Identity and access management (IAM) is a cornerstone of IT and has been for decades. Yet, with the majority of traditional on-prem IT infrastructure migrating to the cloud via vendors such as AWS® and GCP™ and applications shifting to the w… Continue reading Definition of Cloud Identity and Access Management (IAM)
We received alarms for this in our SIEM today. I believe it is expected and just "noise". The alarm was triggered immediately after Exchange cleared the ThrottlingConfig.log.
I know Exchange Server 2013 CU5, CU5 includes a Manage… Continue reading A replay attack was detected (4649) & Exchange Healthmailbox
I have got an Apache Reverse Proxy pointing to my IIS-Failover cluster. The cluster needs a Windows auth with Kerberos. When I want to connect to the failovercluster-listener directly (IP-address), all works fine. When I want… Continue reading Kerberos Auth with Reverse Proxy [migrated]
Trying to understand if Netlogon Debug Logging audits both protocols or Kerberos.
Continue reading Does Netlogon Debug Mode Audit both NTLM and Kerberos?
I’m studying how pass-the-ticket works using Mimikatz, i.e., forged Silver and Golden Kerberos tickets.
The command usually takes the form (Golden tickets):
kerberos::golden /sid:SID /domain:DOMAIN /rc4:RC4 /user:USER /id:ID /ptt
The c… Continue reading Mimikatz /rc4 argument for pass-the-ticket?
I have read the description of Kerberos at sites like this very informative one:
http://www.roguelynn.com/words/explain-like-im-5-kerberos/
I think I understand generally how it works:
User presents identity to the Authentication Serve… Continue reading Kerberos three transactions — why not just use two?
We have five internal web applications written in Java / AngularJs that are secured via Kerberos/ Spnego ( Spring Security implementation) . We are looking to transition these apps to AWS ( EBS) .
I am building a business … Continue reading Reasons to transition Kerberos secured web applications to OAuth2/OpenId