#NauthNRPC is a tool that can help you enumerate computer / user accounts anonymously in #ActiveDirectory via DsrGetDcNameEx2 RPC calls.
This is not often in most environments, so used could be blocked via #RPCFirewall.
Nice job by @haider_kabibo 🏆🏆
https://t.co/Jf0Ep0AGb2
My thoughts about CVE-2025-33073, and on how to prevent #NTLM / #Kerberos relay attacks in general using #RPCFirewall & #LDAPFirewall
https://t.co/oV47fgPedH
Are you sure you can enumerate all of your #Azure resources? You may be missing some out.
#MapAz is a new #PowerShell Module that (among other things) can help you enumerate hidden resources.
Read more in my latest post:
https://t.co/J9DjcaYvIQ
BadSuccessor is a slick AD privilege escalation that uses LDAP to take over user accounts
…and the LDAP Firewall can already block it — no updates needed.
How the attack works + how to block it:
👉 https://t.co/CEzSYW5xL0
A new open source tool to visualize #LDAP data ovre #Neo4j graph database: #Neo4LDAP by @_kripteria !
And, you can inject data directly from #BloodHound 🐕
Check it out here:
https://t.co/qvsafVNdfU
A handy list of LDAP search filters used by common enumeration tools, compiled by @Unit42_Intel (@PaloAltoNtwks).
The best part? You can block all of them with our open-source #LDAPFW! 📷
Full article: https://t.co/m2oZaIRKLN
Get started: https://t.co/z6EDf8vFAF
RemoteMonologue - A Windows credential harvesting attack that leverages the Interactive User RunAs key and coerces NTLM authentications via DCOM. Remotely compromise users without moving laterally or touching LSASS.
Hope you enjoy the blog & tool drop 🤟
https://t.co/ch9WuSP6bm
🌟New report out today!🌟
Fake Zoom Ends in BlackSuit Ransomware
Analysis and reporting completed by @pigerlin, UC1 and @Miixxedup
Audio: Available on Spotify, Apple, YouTube and more!
https://t.co/r9hQxzPTL0
Nice work by @YaronZi & @CrowdStrike promoting LDAP Security to detect suspicious LDAP activities.
https://t.co/aedfdIG8dh
Maybe someone wants to slap an AI agent on their #LDAPFirewall for similar results? :)
https://t.co/G766b53uj7
When we first published "What the Filter" we never thought we would have more than a 100 downloads, let alone a thousand.
We're happy to see the community getting value with the latest version bypassing the 1000 mark ! 🏆
https://t.co/NV1OEViwCW
🎉2024 brought remarkable growth, new faces to #ZeroNation, and plenty of fun moments together 💪🏼🚀.
To our customers, partners, investors, and team—thank you for an incredible year; here’s to a successful and inspiring 2025! 🥂
#ZeroNetworks#NewYear2025#Cybersecurity #Gratitude
Hi all!
We released a native version for WTF-WFP, supporting a limited number of operations. Especially good for those instances when you can't use #PowerShell module #NtObjectManager.
/bypass command will skip the entire layer of filters
https://t.co/pVsPDmGyut
@egosumdns@TalBeerySec@gentilkiwi@harmj0y@_wald0 We're not sure ChatGPT is best for finding bugs, but you're welcome to raise issues @egosumdns.
Even if #LDAPFirewall fails (running now in several production envs with 0 crashes), it will be in the same 𝗰𝗿𝗼𝘄𝗱 with Billion dollar companies who can't say the same
#YOLO