When Kerberos Authenticates Users but Can’t Tell You Who They Are
Dec 28, 2025 · 3 min read · Kerberos authentication worked. Apache accepted the ticket. The backend received the request. And yet, the application had no idea which user was calling it, or which groups they belonged to. This post documents how I built a Kerberos-authenticated A...
Join discussionHow to choose the correct SSO Methods !
Dec 9, 2025 · 8 min read · Most People Use the Wrong Protocol for SSO. But you will learn in this article how to choose right one. In this Article we are going to cover about some of the most used SSO methods why they are used, what’s the purpose, their competition and current...
Join discussion
Why Every Hacker Needs to Understand Kerberos Attacks
Oct 8, 2025 · 5 min read · A Quick Thank You Before diving in, a huge thanks to the offensive security community — from the creators of tools and labs to everyone sharing knowledge daily. Without this spirit of collaboration, many of us wouldn’t have learned how deep and fasci...
Join discussion
A Guide to Configuring AD Group Managed Service Accounts (gMSA)
Jun 18, 2025 · 6 min read · Overview Requirements Create the Key Distribution Services KDS Root Key Creating a new gMSA Configuring Kerberos delegation Removing a gMSA Configuring a Scheduled Task References Overview The below process is run only once, before startin...
Join discussionUnderstanding Active Directory: Strengthening Enterprise Identity and Security
May 29, 2025 · 3 min read · Active Directory (AD) is Microsoft’s system for managing people, computers, and permissions in a company network. Think of it as the central control panel for everything in an organization’s digital environment. It keeps everything organized, secure,...
Join discussion
Dissecting Kerberos
Apr 24, 2025 · 20 min read · I wrote this article because I personally couldn’t find anyone on the internet explaining Kerberos detailed enough separately or while teaching Kerberoasting, most of them just ran tools. And if they did, they didn’t dive deep enough. What can you ex...
Join discussion
Active
Feb 7, 2025 · 5 min read · IP: 10.129.40.252 Let’s start with the nmap scan nmap -sC -sV -o nmap 10.129.40.252 Starting Nmap 7.95 ( https://nmap.org ) at 2025-02-07 12:40 EST Nmap scan report for 10.129.40.252 Host is up (0.27s latency). Not shown: 983 closed tcp ports (reset...
Join discussion
Como autenticar vários usuários de aplicações utilizando o A.D
Dec 29, 2024 · 5 min read · No post anterior fiz uma breve introdução de como conectar no Oracle autenticando pelo Windows A.D. Mas de fato o que são tokens? Como carregar vários tokens manualmente na estação? É isso que vamos ver neste post. De forma macro, como tudo isso func...
Join discussion
Configuring your first Active Directory server | Active Directory Domain Services (ADDS)
Oct 26, 2024 · 7 min read · Introduction Welcome, doodler! In this blog, we will discuss what an Active Directory is, know how it works, and configure it in our environment. What is Active Directory? It is a proprietary directory services product built by Microsoft Corporation ...
Join discussion