Simon Décosse Profile picture
Penetration tester focusing on Active Directory. Challenge designer at @NorthSec_io CTF.
Sep 7, 2022 11 tweets 4 min read
I finished reading this Active Directory book. While the latest edition was released in 2013, it contains plenty of information still relevant to this day.

Below are described 10 tricks or fun facts from the book that you may find useful in infosec.

🧵 (0/10) (1/10) Ambiguous Name Resolution

Are you looking for an object in the directory, but unsure which attribute contains your known value?

In your LDAP query, use the filter "(anr=value)". This would result in the following query for the value "Joe Richards":