Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Legacy Meets Modern: Breaking AD Through NIS & MFA Infrastructure

netspi.com | blog | #pentesting | #active-directory | #mfa | #nis | #mssql | #dcsync | #nifi

Summary

An engagement walkthrough: root access via Apache NiFi, recovered NIS hashes and Duo Auth Proxy secrets, decrypted MFA traffic, then a DA MSSQL relay via xp_cmdshell to domain admin and DCSync.
Published
Collected

original ↗

Related coverage

blog · netspi.com
Finding Sensitive Data on Domain SQL Servers using PowerUpSQL
Demonstrates using PowerUpSQL to discover accessible domain SQL Servers and rapidly sample databases for sensitive PCI, HIPAA, and other regulated records at scale.
blog · netspi.com
Hashdump without the DC using DCSync (because we all wanted it)
Releases Invoke-DCSync, a PowerShell wrapper around Mimikatz's DCSync feature that impersonates a domain controller to dump account hashes without touching the DC.
blog · netspi.com
ADPathFinder: OpenGraph Attack Path Mapping in BloodHound CE
ADPathFinder extends BloodHound CE by unifying SharpHound with OpenGraph collectors, mapping privilege escalation paths across AD, ADCS, MSSQL, and SCCM plus context-aware password audits.
blog · netspi.com
Mainframe State of the Platform: 2025 Security Assessment
Based on dozens of mainframe assessments, NetSPI's 2025 State of the Platform report covers MFA adoption, DES-to-AES cryptographic modernization, and persistent security gaps in enterprise mainframes.
blog · netspi.com
Why TOTP Won’t Cut It (And What to Consider Instead)
NetSPI examines why TOTP codes no longer stop determined attackers, walking through a brute force scenario and recommending stronger 2FA alternatives to replace time-based one-time passwords.
blog · netspi.com
Move from Passive to Proactive with Offensive Security over Cyber Insurance
With cyber insurance premiums climbing and coverage shrinking, carriers now require MFA, access management, and phishing training; investing those dollars in offensive security may pay off better.
back