Record · corpus.blog/posts/01a07df5-21bb-71db-812f-ba085c270350

Protected Users: you thought you were safe uh?

SensePost · published 31 March 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at sensepost.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 30
Words captured: 1,405

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/Porchetta-Industries/CrackMapExec/pull/655

github.com

Abusing Windows’ tokens to compromise Active Directory without touching LSASS Read at the source ↗

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/c252d25f2b050eb097d1533fdfe8dafd.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/7923b49b9f97f221bd81f4175e6d10b4.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/a9e76f9015aa64cb23e3e74859f746bf.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/32462562aa759b9637df0822e552dae1.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/f14d3e165212758ca207a9bfd5e56331.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/02e6914e81fc0c1043f3f73b99756411.png

sensepost.com

https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/protected-users-security-group

learn.microsoft.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/90f2361e90cca21e39f2bcf3ac46d1b7.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/6b394e668501b2287e74b324041929e0.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/64cb6a62c98ca83b6c34a8666fe66e92.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/69d47bbd5758c84c1e7cf67677aa8514.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/d0bed304ff420efa7ffdf8cdcf6042ad.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/d1320f63991dd9e64b6d2ae49c8156d5.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/6a637a856c716c55f40ede03fc812135.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/1afcb093d920681701da9a3b681c59e5.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/9df80df8a62b00b3da4c6d34a35c7831.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/11272a2cd7bb3841951807d2c09b0028.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/af9d51b0d42576ded9f3dce5ae8c2f85.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/35b0b5ecfece09858c61dfb201ad9cf3.png

sensepost.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/a9784f5469d6101870be7315a2101675.png

sensepost.com

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/appendix-d--securing-built-in-administrator-accounts-in-active-directory

learn.microsoft.com

https://sensepost.com/img/pages/blog/2023/protected-users-you-thought-you-were-safe-uh/8f21bb42b33467ef2653f8c2cbeb58d2.png

sensepost.com

https://twitter.com/Defte_

twitter.com

https://twitter.com/_zblurx

twitter.com

https://twitter.com/_nwodtuhs

twitter.com

https://twitter.com/mpgn_x64

twitter.com

https://twitter.com/tiyeuse

twitter.com

https://hideandsec.sh/

hideandsec.sh