Penetration tester focusing on Active Directory. Challenge designer at @NorthSec_io CTF.
Sep 7, 2022 • 11 tweets • 4 min read
I finished reading this Active Directory book. While the latest edition was released in 2013, it contains plenty of information still relevant to this day.
Below are described 10 tricks or fun facts from the book that you may find useful in infosec.
🧵 (0/10)
(1/10) Ambiguous Name Resolution
Are you looking for an object in the directory, but unsure which attribute contains your known value?
In your LDAP query, use the filter "(anr=value)". This would result in the following query for the value "Joe Richards":