Collaborate Disseminate
In March Patch Tuesday, Microsoft released a patch for CVE-2018-0886, a critical vulnerability that was discovered by Preempt. This vulnerability can be classified as a logical remote code execution (RCE) vulnerability. It resembles a classi… Continue reading From Public Key to Exploitation: How We Exploited the Authentication in MS-RDP
In March Patch Tuesday, Microsoft released a patch for CVE-2018-0886, a vulnerability discovered by Preempt researchers. The vulnerability consists of a logical flaw in Credential Security Support Provider protocol (CredSSP) which is used by RDP (… Continue reading Security Advisory: Critical Vulnerability in CredSSP Allows Remote Code Execution on Servers Through MS-RDP (Video)
I am writing a .NET Web API that will be used in an enterprise environment where users authentication themselves using their active directory credentials, so I am using “Windows Authentication” in IIS as authentication scheme… Continue reading Does Windows Authentication Use Secured Connection
Suppose that I am the administrator of a system that uses Kerberos and password authentication. How can I make brute-force attacks on user’s passwords by an attacker who can capture network traffic difficult?
Ideally, I wou… Continue reading Kerberos and brute-force attacks
I’m following the Kicking the Guard Dog of Hedes presentation.
I have a AD and MSSQL Installed and setspn works
CN=SERVER1,CN=Computers,DC=corp,DC=xxx,DC=com
TERMSRV/SERVER1
TERMSRV/server1.corp.xxx.com
MSSQLS… Continue reading Creating an kerberoasting lab
We are implementing a web application that uses Kerberos for authentication. In the browser there is no concerns, so it works perfect. Now we need to supply a subset of web application services via web API.
Getting Kerberos t… Continue reading Web API authentication with Kerberos
We are implementing a web application that uses Kerberos for authentication. In the browser there is no concerns, so it works perfect. Now we need to supply a subset of web application services via web API.
Getting Kerberos t… Continue reading Web API authentication with Kerberos
Bug, fix, bug, fix – but we’re still saying “Well done” to Apple for a superquick response to the “blank root password” vulnerability. Continue reading Apple’s “blank root password” fix needs a fix of its own – here it is
Lastest versions of windows server support authentication with aes 256 keys for kerberos.
I would like to know:
How the AES keys are generated (Are they derived from the password or the nt hash)?
Are these keys stored in … Continue reading How the AES key in active directory is handled?
While there’s a lot of information [1], [2], [3] about resetting the password for the regular krbtgt account, but I haven’t yet found a clear suggestion about RODC-specific krbtgt_xxxxx accounts.
Should those be rotated similarily to regu… Continue reading Password reset for AD RODC-specific krbtgt_xxxxx accounts