The Security Notebook

breachingAD

1 min read

  1. ntlm password spraying an internal web app

Creds:

hollie.powell:Changeme123

heather.smith:Changeme123

gordon.stevens:Changeme123

georgina.edwards:Changeme123

  1. PowerPXE powershell tool can be used to extract passwords from PXE boot images (WIM)

  2. LDAP Binding

  3. Credentials can be stored in configuration files

Graph View

Backlinks