[{"data":1,"prerenderedAt":250},["ShallowReactive",2],{"tag-posts":3},[4,17,29,37,47,52,59,65,72,78,86,93,98,104,109,114,122,133,139,147,153,160,167,173,180,186,192,198,204,212,218,224,231,238,244],{"path":5,"title":6,"description":7,"date":8,"category":9,"tags":10,"readingTime":16},"\u002Fposts\u002Fntlm-analyzer","NTLM-Analyzer: Find Out Who Still Uses NTLM","Windows logs a lot of NTLM activity, but you have to piece it together yourself. I built a tool that shows which users and programs still use NTLMv1 or NTLMv2, and what already runs over Kerberos.","2026-10-03","tools",[11,12,13,14,15],"active-directory","ntlm","kerberos","auditing","windows-server",6,{"path":18,"title":19,"description":20,"date":21,"category":22,"tags":23,"readingTime":28},"\u002Fposts\u002Fwindows-2fa-inside-lsa","Build Your Own 2FA for the Windows Logon, Part 2: Inside LSA","The credential provider from Part 1 only sees the logon screen. Part 2 goes into LSA to close the paths it can't reach, with an authentication package and an MSV1_0 sub-authentication filter in C++.","2026-10-01","windows",[22,24,25,26,27],"credential-provider","lsa","2fa","security",32,{"path":30,"title":31,"description":32,"date":33,"category":22,"tags":34,"readingTime":36},"\u002Fposts\u002Fwindows-2fa-credential-provider","Build Your Own 2FA for the Windows Logon","How a Credential Provider works and how to build a working TOTP 2FA for local Windows accounts in C++. With rate limiting, replay protection and logging.","2026-09-30",[22,24,26,35,27],"totp",60,{"path":38,"title":39,"description":40,"date":41,"category":9,"tags":42,"readingTime":46},"\u002Fposts\u002Fadtierkit-active-directory-tiering","ADTierKit: Automatic AD-Tiering","I got tired of building tier models by hand, so I wrote a tool for it. One PowerShell script, one JSON file.","2026-08-06",[11,15,43,44,45],"powershell","tiering","laps",3,{"path":48,"title":49,"description":49,"date":41,"category":11,"tags":50,"readingTime":51},"\u002Fposts\u002Fldap-ldaps-and-active-directory","The thing with LDAP, LDAPS and Active Directory",[],11,{"path":53,"title":54,"description":54,"date":55,"category":56,"tags":57,"readingTime":46},"\u002Fposts\u002Finstall-tor-exit-node","Install Tor Exit Node","2025-09-30","linux",[58],"tor",{"path":60,"title":61,"description":61,"date":62,"category":11,"tags":63,"readingTime":64},"\u002Fposts\u002Fconfigure-kerberos-armoring","Configure Kerberos Armoring","2025-07-28",[13],1,{"path":66,"title":67,"description":67,"date":68,"category":69,"tags":70,"readingTime":71},"\u002Fposts\u002Fexchange-2019-install","Installation guide for Exchange 2019","2025-06-26","exchange",[],47,{"path":73,"title":74,"description":74,"date":75,"category":11,"tags":76,"readingTime":77},"\u002Fposts\u002Fhow-ntlm-works-active-directory","How NTLM works in Active Directory","2025-05-07",[12],2,{"path":79,"title":80,"description":81,"date":82,"category":11,"tags":83,"readingTime":85},"\u002Fposts\u002Fadfs-installation","ADFS Installation","Basic installation guide for Active Directory Federation Services","2025-01-27",[84],"adfs",4,{"path":87,"title":88,"description":89,"date":90,"category":11,"tags":91,"readingTime":46},"\u002Fposts\u002Fexample-pass-the-hash-attack","Pass the Hash Attack Example","Example of a pass the hash attack","2025-01-22",[92],"pass-the-hash",{"path":94,"title":95,"description":95,"date":96,"category":11,"tags":97,"readingTime":16},"\u002Fposts\u002Fhow-kerberos-works-active-directory","How Kerberos works in Active Directory","2025-01-16",[13],{"path":99,"title":100,"description":100,"date":101,"category":22,"tags":102,"readingTime":46},"\u002Fposts\u002Fconfigure-credential-guard-computer-accounts","Configure Credential Guard for Computer Accounts","2025-01-15",[103],"credential-guard",{"path":105,"title":106,"description":106,"date":107,"category":22,"tags":108,"readingTime":85},"\u002Fposts\u002Fconfigure-credential-guard-windows","Configure Credential Guard","2025-01-13",[103],{"path":110,"title":111,"description":111,"date":107,"category":22,"tags":112,"readingTime":46},"\u002Fposts\u002Fosconfig-windows-server-2025-security","OSConfig - Security Settings for Windows Server 2025",[113],"osconfig",{"path":115,"title":116,"description":117,"date":118,"category":22,"tags":119,"readingTime":46},"\u002Fposts\u002Fsecure-iis-modsecurity","Secure IIS with Modsecurity","Installation guide to secure IIS with Modsecurity","2025-01-12",[120,121],"iis","modsecurity",{"path":123,"title":124,"description":124,"date":125,"category":11,"tags":126,"readingTime":132},"\u002Fposts\u002Fvcsa-certificate-windows-pki","Issue VCSA Certificate with Windows PKI","2025-01-09",[127,128,129,130,131],"ad-cs","pki","vmware","vcsa","vcenter",10,{"path":134,"title":135,"description":135,"date":136,"category":11,"tags":137,"readingTime":138},"\u002Fposts\u002Fwindows-pki-installation","Installation guide for a Windows PKI","2024-12-20",[127,128],36,{"path":140,"title":141,"description":142,"date":143,"category":144,"tags":145,"readingTime":132},"\u002Fposts\u002Fhack-the-box-administrator","Hack The Box: Administrator","Walkthrough for the \"Administrator\" Hack the Box Challenge","2024-11-19","hack-the-box",[146,22,11],"writeup",{"path":148,"title":149,"description":150,"date":151,"category":11,"tags":152,"readingTime":77},"\u002Fposts\u002Fsecure-active-directory-part-1","Secure Active Directory - Part 1","Part 1 of the guide to a secure Active Directory","2024-09-09",[],{"path":154,"title":155,"description":156,"date":157,"category":144,"tags":158,"readingTime":159},"\u002Fposts\u002Fhack-the-box-greenhorn","Hack The Box: Greenhorn","Walkthrough for the \"Greenhorn\" Hack the Box Challenge","2024-07-24",[146,56],12,{"path":161,"title":162,"description":163,"date":164,"category":144,"tags":165,"readingTime":166},"\u002Fposts\u002Fhack-the-box-runner","Hack The Box: Runner","Walkthrough for the \"Runner\" Hack the Box Challenge","2024-07-20",[146,56],9,{"path":168,"title":169,"description":170,"date":171,"category":144,"tags":172,"readingTime":64},"\u002Fposts\u002Fhack-the-box-ghost","Hack The Box: Ghost","Walkthrough for the \"Ghost\" Hack the Box Challenge","2024-07-18",[146,22,11],{"path":174,"title":175,"description":176,"date":177,"category":144,"tags":178,"readingTime":179},"\u002Fposts\u002Fhack-the-box-knife","Hack The Box: Knife","Walkthrough for the \"Knife\" Hack the Box Challenge","2024-07-15",[146,56],7,{"path":181,"title":182,"description":183,"date":184,"category":144,"tags":185,"readingTime":46},"\u002Fposts\u002Fhack-the-box-broker","Hack The Box: Broker","Walkthrough for the \"Broker\" Hack the Box Challenge","2024-07-10",[146,56],{"path":187,"title":188,"description":189,"date":190,"category":144,"tags":191,"readingTime":64},"\u002Fposts\u002Fhack-the-box-permx","Hack The Box: PermX","Walkthrough zur \"PermX\" Hack the Box Challenge","2024-07-08",[146,56],{"path":193,"title":194,"description":195,"date":196,"category":144,"tags":197,"readingTime":46},"\u002Fposts\u002Fhack-the-box-lame","Hack The Box: Lame","Walkthrough zur \"Lame\" Hack the Box Challenge","2024-07-06",[146,56],{"path":199,"title":200,"description":201,"date":202,"category":144,"tags":203,"readingTime":85},"\u002Fposts\u002Fhack-the-box-analytics","Hack The Box: Analytics","Walkthrough zur \"Analytics\" Hack the Box Challenge","2024-06-30",[146,56],{"path":205,"title":206,"description":207,"date":208,"category":144,"tags":209,"readingTime":211},"\u002Fposts\u002Fhack-the-box-sense","Hack The Box: Sense","Walkthrough zur \"Sense\" Hack the Box Challenge","2024-06-28",[146,210],"freebsd",5,{"path":213,"title":214,"description":215,"date":216,"category":144,"tags":217,"readingTime":51},"\u002Fposts\u002Fhack-the-box-mailing","Hack The Box: Mailing","Walkthrough zur \"Mailing\" Hack the Box Challenge","2024-06-26",[146,22],{"path":219,"title":220,"description":221,"date":222,"category":144,"tags":223,"readingTime":46},"\u002Fposts\u002Fhack-the-box-jerry","Hack The Box: Jerry","Walkthrough zur \"Jerry\" Hack the Box Challenge","2024-06-20",[146,22],{"path":225,"title":226,"description":226,"date":227,"category":56,"tags":228,"readingTime":64},"\u002Fposts\u002Flinux-ssh-telegram-notifications","Setting up notifications via Telegram for SSH login\u002Flogoff","2024-06-01",[229,230],"ssh","monitoring",{"path":232,"title":233,"description":234,"date":235,"category":144,"tags":236,"readingTime":237},"\u002Fposts\u002Fhack-the-box-forest","Hack The Box: Forest","Walkthrough zur \"Forest\" Hack the Box Challenge","2024-05-20",[146,22,11],16,{"path":239,"title":240,"description":240,"date":241,"category":69,"tags":242,"readingTime":64},"\u002Fposts\u002Fpowershell-connect-to-exchange-online","Verbindung zu Exchange Online mit Powershell","2023-10-23",[243,43],"m365",{"path":245,"title":246,"description":247,"date":248,"category":69,"tags":249,"readingTime":64},"\u002Fposts\u002Fexchange-october-2023-updates","Exchange Server","Neue Sicherheitsupdates (Oktober 2023)","2023-10-18",[],1791074676445]