@Sinful__Corpse @wil_fri3d

Preparing for Christmas, never too early ❄️

Anyone knows how some Active Directory LDAP attributes can only be queried via LDAPS (not LDAP), like msDS-managedPassword? searchFlags are set to 0x00 on this attribute, so it's not set here (learn.microsoft.com/en-us/op…)

I agree with @SecengL Attackers' interest is probably much greater on the most widely used browsers Market shares in 2020-2021:

I have tried that already but it's not working either. Thanks for the reply though 🙏

For clarification, I would expect "forwardable" flag on my ticket, but it's missing, and I don't understand why. AdminCount is set to 0 (I don't think AdminSDHolder has anything to do with this, but just in case)

Marrant, hier également en banlieue parisienne

Does anyone know how to make python-ldap library return *all* object's attributes? When I leave attrlist to None, it returns some attributes, but not all of them (especially not the one I want). It this example, "ou" attribute is returned, but not gPLink and gPOptions. Thanks 🙃

Je suis fasciné par l'adaptabilité du chat de OpenAI

Glad it helped

Oh yeah! Finally 😍 Thank you @flipper_net

Just received my #CrackMapExec coin from @porchetta_ind, and I love it 😇 Thank you @mpgn_x64 and @byt3bl33d3r

It also applies to nested objects (groups & users)

Yes I've seen that but it requires MSSQL being installed on the target. It may be interesting to check if SQLDumper.exe works as a standalone tool though. If it does, I'll add it to lsassy. In the meantime there are plenty other ways to dump lsass when Defender is on 🙃 For ex:

While trying some random stuff to bypass @CarbonBlack App Control (High Enforcement policy), I stumbled across this behavior I'm not able to explain. I'm not allowed to run an arbitrary batch file, but using these commands, it is somehow executed. Any idea what might cause this?

You can use lsassy comsvcs_stealth module to use this trick 🙃

You can extract DPAPI secrets remotely using DonPAPI by @LoginSecurite (@T00uF), even using a relayed SMB session using ntlmrelayx from #impacket and proxychains 🔥 github.com/login-securite/Do…

I was able to test #antlmrelay relaying tool from @SkelSec and it looks super promising! Clean console with easy to use commands, lots of relaying possibilities, insane work, as always.

Here you go