Tag: Active-Directory

In-depth explanation of the msDS-KeyCredentialLink attribute used in a shadow credentials attack, and how to parse it.

We will see a few common queries to find useful information in LDAP during a Windows Active Directory pentest.

Enumerating Active Directory sites and subnets is an important part of the enumeration phase. We will see how to extract them from Windows and linux.