@Sinful__Corpse @wil_fri3d

Preparing for Christmas, never too early ❄️

Anyone knows how some Active Directory LDAP attributes can only be queried via LDAPS (not LDAP), like msDS-managedPassword? searchFlags are set to 0x00 on this attribute, so it's not set here (learn.microsoft.com/en-us/op…)

I agree with @SecengL Attackers' interest is probably much greater on the most widely used browsers Market shares in 2020-2021:

I have tried that already but it's not working either. Thanks for the reply though 🙏

For clarification, I would expect "forwardable" flag on my ticket, but it's missing, and I don't understand why. AdminCount is set to 0 (I don't think AdminSDHolder has anything to do with this, but just in case)

Marrant, hier également en banlieue parisienne

Does anyone know how to make python-ldap library return *all* object's attributes? When I leave attrlist to None, it returns some attributes, but not all of them (especially not the one I want). It this example, "ou" attribute is returned, but not gPLink and gPOptions. Thanks 🙃

Je suis fasciné par l'adaptabilité du chat de OpenAI

Glad it helped

Oh yeah! Finally 😍 Thank you @flipper_net

Just received my #CrackMapExec coin from @porchetta_ind, and I love it 😇 Thank you @mpgn_x64 and @byt3bl33d3r

It also applies to nested objects (groups & users)

Yes I've seen that but it requires MSSQL being installed on the target. It may be interesting to check if SQLDumper.exe works as a standalone tool though. If it does, I'll add it to lsassy. In the meantime there are plenty other ways to dump lsass when Defender is on 🙃 For ex: