An Invisible Threat: Empty Passwords within Active Directory
Empty passwords: two seemingly innocuous words that can spell disaster for your organization’s security posture. These accounts offer no protection whatsoever, often paving the way for more advanced attacks. In this article, we’ll shed light on what exactly...
LLMNR Poisoning and How to Prevent It in Active Directory
0. Overview Active Directory (AD) stands as a foundational piece for many organizational networks, streamlining administrative tasks and enhancing productivity. However, out of the box, AD comes bundled with various features and default settings that can be exploited...
SMB Relay Attacks and How to Prevent Them in Active Directory
0. Overview Many organizational networks rely on Active Directory (AD) to streamline administrative tasks and enhance efficiency. However, some of its default configurations are vulnerable to attackers. The SMB (Server Message Block) protocols stand out as...
Kerberoasting Domain Accounts
The Gift That Keeps on Giving Few vulnerabilities in the Windows Active Directory environment have had the long-lasting impact that Service Principal Names (SPN) have. Domain-connected services, such as MSSQL servers, web servers, and more may be connected and issued...
