The AD CS Backdoor
Reading Time: 5 minutesAD CS attacks like ESC1 through ESC8 turn a certificate server into full domain takeover. Here’s what each misconfiguration is and how to audit for it.
Wait for service to appear – PowerShell
Reading Time: 3 minutes This past week I had to install a piece of software that took 30 minutes to install. The software had multiple levels of processes that made the -wait feature completely useless. The best way to know the software was installed is to detect the…
Microsoft Graph API – Powershell, Download user Images
Reading Time: < 1 minute In my previous post, we went over how to Grab user information from a client. Today we will be going over how to Download User Images with Graph API. This piece is very straightforward until you get to the graph link. There is a unique…
Microsoft Graph API PowerShell
Reading Time: 5 minutes In the last blog, We talked about how to create a registered app with Graph API permissions. This app’s main purpose is to become the base for an employee directory through Powershell. If you haven’t read it yet, you can here. Today’s blog is…
