Menu / Tag

#active-directory

7 items with this flavour

ADHardenKit: Hardening AD Without Breaking ItOct 7, 2026LDAP signing, SMB signing, NTLM, Kerberos with AES only. Every hardening checklist has them. I wrote a tool that turns them on in an order that doesn't break the domain.Tools5 min · Cappuccino#active-directory#windows-server#powershell#hardening NTLM-Analyzer: Find Out Who Still Uses NTLMOct 3, 2026Windows logs a lot of NTLM activity, but you have to piece it together yourself. I built a tool that shows which users and programs still use NTLMv1 or NTLMv2, and what already runs over Kerberos.Tools6 min · Cappuccino#active-directory#ntlm#kerberos#auditing ADTierKit: Automatic AD-TieringAug 6, 2026I got tired of building tier models by hand, so I wrote a tool for it. One PowerShell script, one JSON file.Tools3 min · Espresso#active-directory#windows-server#powershell#tiering How NTLM works in Active DirectoryMay 7, 2025How NTLM proves that you know a password without sending it, what the domain controller does, the difference between NTLMv1 and NTLMv2, and why Microsoft is phasing it out.Active Directory9 min · Cappuccino#ntlm#active-directory#authentication Hack The Box: AdministratorNov 19, 2024Walkthrough for the "Administrator" Hack the Box ChallengeHack The Box10 min · Cappuccino#writeup#windows#active-directory Hack The Box: GhostJul 18, 2024Walkthrough for the "Ghost" Hack the Box ChallengeHack The Box1 min · Espresso#writeup#windows#active-directory Hack The Box: ForestMay 20, 2024Walkthrough zur "Forest" Hack the Box ChallengeHack The Box16 min · Filter#writeup#windows#active-directory