Forest Compromise Through AMA Abuse
Authentication Mechanism Assurance (AMA) is a useful feature to protect sensitive assets. However, it turns out it can be leveraged for nefarious purposes.
Category: Kerberos
Manually injecting a SID in a certificate
With KB5014754, released on May 10, 2022, a CA injects the Security Identifier (SID) of accounts as a new extension in issued certificates. But what if we want to inject it manually?
Remote Desktop, MFA, Network Level Authentication and KDC Proxy
Introduction Recently I was presented with a challenge at one of my customers. We were setting up a new, completely
Q&D Security 