TL;DR walkthrough of the THM Credential Harvesting module, located here. Background Try Hack Me recently launched their Red Teaming pathway. I am nowhere near done with the whole thing yet, but I couldn’t resist jumping ahead to the last module under the AD part on credential harvesting. It was great…

TL;DR a simple example of how a [mis]configuration can create an escalation path, the importance of inheritance, and how to easily check for this sort of thing. Welcome to Part XV of our Auditing AD Series! Part I: 3 warm up questions to get us started Part II: Who can…

TL;DR Yes, CA will once again pay SANS renewal fees. The only limit is the amount of TA you have left for the year. Details & the step by step to apply are below. Background The old ArmygnitED worked alright for CA but everyone had heard the horror stories regarding…

TL;DR It turns out that Self is so arcane that some paid tools don’t even check for it. Walkthrough of lab setup, enumeration using free methods & a trial version of this paid tool, abuse, and mitigation. Welcome to Part XIV of our Auditing AD Series! Part I: 3 warm…

TL;DR Base64 encoded commands in PowerShell and a corny IT Christmas carol Merry Christmas and welcome to Part VII of our Back to the Basics Series! Part I: NTDS.dit vs SAM Part II: Ownership Matters Part III: Recovering from a Crash Part IV: Setting up a Simple Honeypot Account Part…

TL;DR walkthrough of how two incredibly arcane Windows rights can potentially result in a privilege escalation path. Welcome to Part XIII of our Auditing AD Series! Part I: 3 warm up questions to get us started Part II: Who can reset the CISO’s password? Part III: Who can execute DCSync? …

TL;DR howto setup BlueHound, useful as a blue team version of BloodHound, provides AD info as well as vulnerability & other info. Overall a very versatile tool. Part I: Howto Setup BloodHound Part II: Howto Setup BlueHound Background This isn’t new, but it was new to me. I didn’t see…

TL;DR I recently ran into an issue in the hybrid AD lab that was difficult to diagnose but easy to fix. It is RE logging into AAD as the Global Admin from ‘on prem’, TLS 1.2 & error code AADSTS1002016. Posting it here in case it helps anyone else. Welcome…

TL;DR Certified in Cybersecurity is ISC2’s new entry level exam. It is currently free to take the exam and the ISC2 training is also free online. Background I have not seen any reviews of International Information System Security Certification Consortium’s (ISC2’s) new entry certification out there on Google so I…