Steve's user avatar
Steve's user avatar
Steve's user avatar
Steve
  • Member for 13 years, 4 months
  • Last seen more than a week ago
4 votes

Are .NET project GUID's visible when compiling?

1 vote

How does a developer interact with Microsoft Certificate *Web Services*

1 vote
Accepted

Why AD Kerberos uses password hash and not session key for tickets?

2 votes
Accepted

How to extract Kerberos ticket from Wireshark?

6 votes

security implications of Java's System.load vs System.loadLibrary

1 vote

Are Credentials used in RDP cached on Client?

1 vote
Accepted

Kerberos Ticket Granting Service TGS - order of communication steps

18 votes

Does Windows really still use unsalted MD4 for password storage?

1 vote
Accepted

How is the initial request made to the Access Server in Kerberos?

2 votes
Accepted

How NTLM SSO is preformed on smartcard Kerberos logon?

2 votes
Accepted

How to investigate potential infected client workstation

0 votes

Are there any decent web app security scanners that can integrate with a build server?

3 votes
Accepted

Can a Kerberos application server offer to proxy connections to the KDC?

1 vote

Can a fingerprint be reconstructed from a device that uses it for authentication?

1 vote
Accepted

Why do administrators create passwords vulnerable to kerberoasting?

6 votes

Storing credit cards for automatic payments?

1 vote
Accepted

Information disclosure via ktpass tool

1 vote

MIT Kerberos: getting keytabs onto hosts securely

2 votes

Is the MIT implementation of Kerberos protocol as vulnerable as the one used by Microsoft?

1 vote
Accepted

Authorization Code: Is there a specific format it has to follow?

0 votes
Accepted

Kerberos - obtaining the krbtgt's secret in order to perform Golden Ticket attack

2 votes

Kerberos composite authentication that reflects user's origin

34 votes
Accepted

Why does Windows not always force me to confirm my password when changing it?

1 vote

An intranet web app for decrypting values : a bad idea, and if so, why?

2 votes
Accepted

When/why should the "mark this key as exportable" option be selected when importing a certificate?

1 vote

What exactly could we get as an attacker if Kerberos Pre-Authentication is disabled?

17 votes

How does the Windows "Secure Desktop" mode work?

3 votes
Accepted

Is it possible to use Kerberos for SSO in a SaaS application?

1 vote

Does OAuth2 state parameter need to be cryptographically secure?

2 votes
Accepted

Non malware use cases of LSASS dumping

1
2 3 4 5
11