WorkingHardInIT

Technical Architect & Strategist in Microsoft technologies Hyper-V, Azure, AD & Identity, Networking & Storage. Small addiction to 100Gbps, NVMe & PMEM!

[Nix0n @UnTalNixon_exe]

Olvídate de DCSync y las copias de sombra de NTDS. Si quieres extraer hashes de Active Directory sin hacer ruido, este es el camino.

Timeroasting abusa del servicio de tiempo de Windows (NTP) para robar hashes de forma sigilosa. Y lo peor: pasa desapercibido en la mayoría de pipelines de detección.

🧵 ¿Cómo funciona y cómo detectarlo?

1️⃣ El protocolo olvidado: Abusa de la extensión NTP de Microsoft para recolectar hashes de cuentas de máquina (y en escenarios avanzados, cuentas manipuladas).

2️⃣ Cero alertas: El tráfico NTP es omnipresente en cualquier red corporativa, por lo que el ruido generado es prácticamente nulo comparado con otras técnicas.

3️⃣ Crackeo offline: Los hashes obtenidos se pueden tirar contra Hashcat (-m 31300) para romper contraseñas débiles.

Los defensores necesitan empezar a monitorear anomalías en peticiones MS-SNTP ya mismo.

Aprende a implementarlo paso a paso con PowerShell aquí 👇

[Hyper-V-Server Blog @hypervserver]

Bernhard Frank: Azure Local – Lessons Learned
CDC-Germany · 30.9., 13:55 · Hanau
https://t.co/rNOAZMxr0O

Bernhard https://t.co/7HHaz9vS10
Eric https://t.co/tY6UZYhPTI
Manfred https://t.co/Lj4z2ucy67
Carsten https://t.co/5mMsT2GcyZ

[Hyper-V-Server Blog @hypervserver]

Danke SVA, Gold-Sponsor der CDC-Germany!
IT-Lösungen, Projekt-Know-how und Austausch mit der Community.
Trefft euch am 30.9.–1.10.2026 im Congress Park Hanau.
Agenda & Tickets: https://t.co/rNOAZMxr0O
#CDCGermany #SVA

[WorkingHardInIT @WorkingHardInIT]

Yes, #IAKerb and #LocalKDC testing is ongoing in the lab #MVPBuzz #NTLM, for whom the bell tolls! Register for Cloud & Datacenter Conference Germany 2026 — 30. Sept. & 01. Okt., Hanau via this link https://t.co/BZfHhh6nKz

[WorkingHardInIT @WorkingHardInIT]

@merill Is the slide deck / recording publically available ...?

[Hyper-V-Server Blog @hypervserver]

🎤 Natanael Mignon bei der CDC-Germany

Living Knowledge: Wie Copilot, Loop und KI Wissensarbeit verändern

Vom Dokument zum gemeinsam nutzbaren Wissen.

📅 30. Sept. · 17:30 · Hanau
🎟️ https://t.co/rNOAZMwTbg

#Copilot #Microsoft365

[Hyper-V-Server Blog @hypervserver]

🎤 Speaker Spotlight: @WorkingHardInIT

2 Deep Dives bei der CDC-Germany: SMB over QUIC in Windows Server 2025 und der Weg weg von NTLM – mit IAKERB & Local KDC.

📅 30. Sept. & 1. Okt. · Hanau
🎟️ https://t.co/rNOAZMwTbg

#WindowsServer #SMB #NTLM

[WorkingHardInIT @WorkingHardInIT]

Even for my blog, keeping up to date is routine: daily for patches & quarterly for PHP and MySQL versions, or ad hoc for emergencies. Windows Server 2025, fully patched, MySQL 9.7 LTS & PHP 8.5.9 for my blog https://t.co/Ttuwgh0a4N #MVPBuzz #VeeamVanguard #Community #Blogging

[WorkingHardInIT @WorkingHardInIT]

New Blog Post: Veeam Application Backup Repository (ABR) in v13.1 for network devices

https://t.co/GJK6jewMzK #VeeamVanguard #Community #MVPBuzz #Veeam

[WorkingHardInIT @WorkingHardInIT]

@bartlannoeye Welcome to 2026 where the security landscape is so bad we afraid to use the tech we created and buy at great cost by reducing it to nothing useful to avoid failure and disaster.

[WorkingHardInIT @WorkingHardInIT]

@MPECSInc @MVPAward Yes sir, still around

[WorkingHardInIT @WorkingHardInIT]

@wmatthyssen Well deserved Wim!

[WorkingHardInIT @WorkingHardInIT]

@StanZhelyazkov You rock buddy

[WorkingHardInIT @WorkingHardInIT]

I am happy and honored to have been accepted into the Microsoft MVP program for 2026-2027 as a Datacenter Management &*Hyper-V Microsoft MVP. I've been an MVP since 2012, and it has been a very interesting & fun journey so far! #MVPBuzz #Community #Sharing #Expertise #Learning

[WorkingHardInIT @WorkingHardInIT]

More hiking today despite a lot of driving

[WorkingHardInIT @WorkingHardInIT]

A slot canyon at sunset ... #hiking

[WorkingHardInIT @WorkingHardInIT]

Hiking ...

[WorkingHardInIT @WorkingHardInIT]

One of the great joys is spotting condors. Nr 20, 2, 88 and US. US I saw the best flying in ..., number 2 only in a flash but my hunch was right.

[WorkingHardInIT @WorkingHardInIT]

Hiking ... Good for body and soul ...