7MS #668: Tales of Pentest Pwnage – Part 69

7MS #668: Tales of Pentest Pwnage – Part 69

Hola friends! Today’s tale of pentest pwnage talks about abusing Exchange and the Azure ADSync account! Links to the discussed things:

  • adconnectdump – for all your ADSync account dumping needs!
  • Adam Chester PowerShell script to dump MSOL service account
  • dacledit.py (part of Impacket) to give myself full write privileges on the MSOL sync account: dacledit.py -action ‘write’ -rights ‘FullControl’ -principal lowpriv -target MSOL-SYNC-ACCOUNT -dc-ip 1.2.3.4 domain.com/EXCHANGEBOX$ -k -no-pass
  • Looking to tighten up your Exchange permissions – check out this crazy detailed post

Avsnitt(682)

Populärt inom Politik & nyheter

p3-krim
flashback-forever
svd-dokumentara-berattelser-2
rss-viva-fotboll
olyckan-inifran
rss-vad-fan-hande
svenska-fall
aftonbladet-daily
rss-sanning-konsekvens
fordomspodden
motiv
blenda-2
krimmagasinet
rss-krimstad
dagens-eko
spar
rss-frandfors-horna
rss-expressen-dok
spotlight
svd-nyhetsartiklar