Kerberos

Roasting AS-REPs

Last November, I published a post titled “Kerberoasting Without Mimikatz” that detailed new developments with PowerView and Tim Medin’s Kerberoasting attack. This started me down the path of looking at Kerberos just a bit more closely. Then a few weeks ago, my coworker Lee Christensen found an…

LDAP flow with Kerberos authentication

The LDAP sequence diagram describes authenticated LDAP directory lookup.

Kerberos authentication

Kerberos allows the users to login once and then automatically get logged into all the services they may need. The…

Exposing WCF services secured with Kerberos through WSO2 API Manager — Passthrough runtime API calls

When we secure APIs using WSO2 API Manager they’re secured using OAuth 2.0. A user/developer has to subscribe to that API, get an access token and should pass…

SaltStack: Deploy a Kerberos server and clients

WebCam remota com Raspberry PI e Motion.

Olá, pessoas!

Hoje veremos como utilizar o Motion em conjunto com o Raspberry Pi para criarmos um pequeno sistema de segurança que pode ser acessado de onde você quiser, por meio de qualquer browser.

Monopoly on OS, enterprise authentication, Office suites. Does a monopoly affect security?, by Guurhart

Is Microsoft finally getting to a stage where it will try to shoulder some of its responsibility?

on click travelocity app instead of going to idp and fetching credentials using iwa its showing this error page

Bug de 21 Anos No Protocolo Kerberos Recebe Patch

O bug de 21 anos no protocolo Kerberos recebe patch de correção para Windows e Linux.

Pass-The-Ticket (PTT) attack in Mimikatz (and a Gotcha!)

Introduction

Pass-the-ticket attack is a well-known method of impersonating users on an AD domain. AD typically users Kerberos to provides single sign-on and SSO.