The AD CS Backdoor
Reading Time: 5 minutesAD CS attacks like ESC1 through ESC8 turn a certificate server into full domain takeover. Here’s what each misconfiguration is and how to audit for it.
Disable Shared Mailbox Sign-Ins
Reading Time: 2 minutes As part of the exchange online hardening process, one must disable the sign-in ability of shared mailboxes. This process is simple. You will need to exchange Online and the MS Online modules. First, we will grab all the shared mailboxes using…
Oneliner Password Generator
Reading Time: 2 minutes Passwords, Passwords, and more Passwords. Let’s generate a 16 character password that is complex and random that you will have to save into your password manager because you will never remember it. The Single Line…
Dad Jokes
Reading Time: < 1 minute One of the things I love to do is add a Dad joke to my reports. Reddit has some good ones. What’s cool about Reddit is they have a JSON backend that can be used and Used I do. The Function Function Get-DadJoke { $DadJoke = Invoke-RestMethod…
