Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

LDAP, LDAPS, and Active Directory

semperis.com | blog | #pentesting | #active-directory | #windows-security | #tls | #ldap | #semperis | #ldaps

Summary

Why the common 'switch from LDAP to LDAPS' recommendation is mostly ineffective: AD members always use port 389, common workarounds fail, and the post explains what actually hardens AD LDAP.
Published
Collected

original ↗

Related coverage

blog · semperis.com
How to Redefine Cyber Resilience: Start by Rethinking Hybrid Identity Protection
Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.
blog · semperis.com
What You’re Missing: Proper LAN Manager Authentication Levels
Why LAN Manager authentication level 2 on domain controllers is risky — and how moving to level 3 blocks outbound NTLMv1 while keeping legacy compatibility, a fix you can apply today.
blog · netspi.com
Dumping Active Directory Domain Info – with PowerUpSQL!
Thomas Elling demonstrates querying Active Directory through SQL Server's OLE DB ADSI provider with OPENQUERY and OPENROWSET, adding new PowerUpSQL functions that automate AD recon from SQL servers.
blog · netspi.com
Finding Sensitive Data on Domain SQL Servers using PowerUpSQL
Demonstrates using PowerUpSQL to discover accessible domain SQL Servers and rapidly sample databases for sensitive PCI, HIPAA, and other regulated records at scale.
blog · netspi.com
Running LAPS Around Cleartext Passwords
Explains how Microsoft LAPS stores local admin passwords in LDAP, and how incorrect delegation on ms-MCS-AdmPwd can expose cleartext credentials that aid lateral movement.
blog · netspi.com
Faster Domain Escalation using LDAP
Shows how to find systems where Domain Admins are likely logged in by querying the ServicePrincipalName attribute over LDAP, with a PowerShell module to automate the process.
back