AP Security: “#windows #redteam #pentest Используем NTLM-relay для Exchange с целью…”

AP Security @ap_security · 3.98K subscribers

Post #517 1K Mar 25, 2024, 09:48 UTC

#windows #redteam #pentest

Используем NTLM-relay для Exchange с целью повышения привилегий🟦

В статье будет рассмотрен сценарий использования NTLM-relay атаки с целью получения привилегии для проведения DCSync и полной компрометации домена

PrivExchange

Cqure Abusing Exchange: One API call away from Domain Admin In most organisations using Active Directory and Exchange, Exchange servers have such high privileges that being an Administrator on an Exchange server is enough to escalate to Domain Admin. Recently I came across a blog from the ZDI, in which they detail…

👍 5
🔥 2
❤ 1

Open in Telegram All posts from @ap_security