Đang tải bảng tin…
InfoSec Write-ups0 Hot0 bình luận3 phút đọc
Demonstrating LLMNR Poisoning in Active Directory
A walkthrough of LLMNR poisoning attacks in an Active Directory environment. LLMNR (Link Local Multicast Name Resolution) acts as a DNS fallback, and when a user mistypes a hostname, an attacker on the same network can intercept the request using Responder, capture NTLMv2 password hashes, and crack them with Hashcat using a wordlist like rockyou.txt. The demo uses a Windows Server 2016 domain controller and a Windows 10 Enterprise client in a VMware lab.
Nguồn: https://infosecwriteups.com/demonstrating-llmnr-poisoning-in-active-directory-d531a1920f02. 8sync News chỉ tóm tắt và dẫn link; bản quyền nội dung thuộc tác giả và nguồn gốc.
Đề xuất cho bạn
InfoSec Write-ups0 Hot9 phút
Exploiting Resource-Based Constrained Delegation (RBCD)
A detailed technical walkthrough of Resource-Based Constrained Delegation (RBCD) exploitation in Active Directory environments. Covers Kerberos delegation fundamentals (TGT, TGS, S4U2Self, S4U2Proxy), explains how RBCD differs from classic constrained delegation by accepting non-forwardable tickets, and provides a full step-by-step exploit chain. Prerequisites include write permissions on a computer object and an account with an SPN (or the ability to create one via MachineAccountQuota). Both Linux (Impacket, BloodyAD) and Windows (Powermad, Rubeus) command examples are provided for creating a rogue computer account, configuring RBCD, obtaining a service ticket impersonating Administrator, and passing the ticket to gain shell access or dump credentials.
