Forest Compromise Through AMA Abuse
Authentication Mechanism Assurance (AMA) is a useful feature to protect sensitive assets. However, it turns out it can be leveraged for nefarious purposes.
Author: Carl Sörqvist
Manually injecting a SID in a certificate
With KB5014754, released on May 10, 2022, a CA injects the Security Identifier (SID) of accounts as a new extension in issued certificates. But what if we want to inject it manually?
Remote Desktop, MFA, Network Level Authentication and KDC Proxy
Introduction Recently I was presented with a challenge at one of my customers. We were setting up a new, completely
Supply in the Request Shenanigans
Active Directory Certificate Services makes it easy to issue certificates for any organization. But is there something lurking beneath the surface?
Bypassing WIA on ADFS
AD FS Single Sign-On is a wonderful feature for your users, as they don’t have to log on manually after logging on to their computer. But what if you need to provide Forms-Based Authentication for some clients or users?
Q&D Security 