Collaborate Disseminate
My organization uses SSO for its applications i.e. Once a user logs into his Windows 10 workstation, he accesses his web application without login. I was informed that the web applications uses NetIQ Identity Manager(IdP) and Kerberos in t… Continue reading How does the browser know windows logged in user id or Kerberos TGT?
Firstly, please apologise me if I’m still confused about stuff here, Kerberos auth is quite the complex issue for a java dev
So, I have the following scenario:
A suite of webapps which use kerberos pre-authentication for ac… Continue reading Browser not generating kerberos ticket
I have developed a TLS 1.3, PKI based communication module with OpenSSL for a SCADA system. I intend to broaden the security of this system by implementing some kind of access control. My goal is to be able to set the privile… Continue reading How to develop the access control/authorization of a TLS 1.3 based system?
The NTLM over HTTP documentation can be found here https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-ntht/f09cf6e1-529e-403b-a8a5-7368ee096a6a
Where is the Kerberos over HTTP official documentation?
best tool to multi-threaded wordlist attack on active directory users?
i have a list with users and also a badpassword list.
parameter should be: app -u users.txt -p pasws.txt
it should test every user with every pass.
The first step in a kerberoasting attack is to discover Service Accounts via AD enumeration. One way to do so is searching LDAP for any registered SPNs (Service Principal Names). However, from my understanding, service accoun… Continue reading How to obtain Service Tickets (TGS) for Service Accounts with no SPNs (ServicePrincipalName) set?
The principles are programs instead of human. I want to rotate their password regularly, using random generated password, and then deliver the new password to the programs. I have a mechanism to make program use the new passw… Continue reading Does kerberos support a grace period in password changes?
I’m aware that SPNEGO is de-facto only used in the wild for Kerberos or NTLM. Is there any research / academic / educational example on how it can be also used for other mechanisms as well?
Hacker is able to sniff the traffic between the editor, the KDC and the network scanner during the key exchange. Is he/she able to decrypt the sniffed data key?
As our research team continues to find vulnerabilities in Microsoft that bypass all major NTLM protection mechanisms, we start to wonder about the successor protocol that replaced NTLM in Windows versions above Windows 2000.
Enter Kerberos. Every … Continue reading 10 Things You Need to Know About Kerberos