7MS #668: Tales of Pentest Pwnage – Part 69 Podcast Por  arte de portada

7MS #668: Tales of Pentest Pwnage – Part 69

7MS #668: Tales of Pentest Pwnage – Part 69

Escúchala gratis

Ver detalles del espectáculo

Acerca de esta escucha

Hola friends! Today’s tale of pentest pwnage talks about abusing Exchange and the Azure ADSync account! Links to the discussed things:

  • adconnectdump – for all your ADSync account dumping needs!
  • Adam Chester PowerShell script to dump MSOL service account
  • dacledit.py (part of Impacket) to give myself full write privileges on the MSOL sync account: dacledit.py -action ‘write’ -rights ‘FullControl’ -principal lowpriv -target MSOL-SYNC-ACCOUNT -dc-ip 1.2.3.4 domain.com/EXCHANGEBOX$ -k -no-pass
  • Looking to tighten up your Exchange permissions – check out this crazy detailed post
adbl_web_global_use_to_activate_T1_webcro805_stickypopup
Todavía no hay opiniones