New answers tagged active-directory
Jason Fossen, the SANS instructor for SEC505, posted a great article about this (below). While the topic is for local accounts, one could use his script for domain accounts as well. He also mentions some of the commercial solutions too. Reset Local Administrator Password Using A Different Random String On Each Computer And Recover The Passwords Securely
ARP poisoning and IP spoofing are one way to do this with nothing more than a node on the network. In general, what you end up doing is impersonating the AD server during negotiation. The technical details probably aren't interesting in this context, but if you pretend to be the AD server, you can do a lot of things. One of these things might be to ...
Well, it really depends on what you mean by local AD traffic. If you mean that it is on your server machine only, you are pretty much done for if it is compromised anyway, so encrypting stored Username/Password data would only be marginally useful - if you had strong, separately encrypted usernames and passwords, encrypting them could make it very difficult ...
ARP spoof to obtain the credentials passing over the network, then pass the hash. Arpspoofing is a way to intercept traffic by attacking layer 2 of the OSI model. In this example, the attacker would send arp responses to the target host with the same IP of the default gateway but a different MAC address which is owned by the attacker. This causes the ...
I'm wondering how to secure a similiar architecture. On my site i've decided to go for on of the two following opts: 1) use a RODC dc in DMZ ( limiting thus any WRITE risk to active directory ) 2) using ADAM as reverse LDAP Proxy ( see this article http://technet.microsoft.com/en-us/magazine/2008.12.proxy.aspx ) Hope it helps
Top 50 recent answers are included