Introduction Warning The hash-organiser, ntds-organiser, and password-analyser tools mentioned in this article were intially created as PoCs. Their functionality have now been integrated into password-audit. ...
Introduction Warning The hash-organiser and phase-cracker tools mentioned in the Introduction and Vibe-Coding sections, respectively, were intially created as PoCs. Their functionality have now been integrated into password-audit. ...
Introduction Warning The hash-organiser tool mentioned in the Vibe-Coding section was intially created as a PoC. Its functionality has now been integrated into the password-audit tool. ...
Introduction This article is about pentesting, not red teaming. We are given a DA account to extract NTDS, we don’t need to be stealthy or anything of that sort. Therefore, OPSEC considerations out of scope. I recently went from just testing (close-to-zero-functionality) web apps and APIs to doing more varied stuff, including internal assessments. An internal test consists of many different parts, one of which is assessing the passwords used within the domain (what we call a password audit). ...