Attacking and Remediating Excessive Network Share Permissions in Active Directory Environments

PowerHuntShares 2.0 adds LLM-based fingerprinting, secrets extraction, risk scoring, and graph exploration to help defenders and pentesters find SMB shares with excessive privileges.

This post focuses on obtaining domain administrative privileges from a local administrator or domain user account. Once the initial steps have been taken to obtain local administrative access on a Windows operating system, the natural next steps are to gain domain user and domain administrative privileges.

RayV Lite is NetSPI's open-source, low-cost laser fault injection platform debuted at Black Hat 2024, showing laser-based chip attacks are now within reach of researchers, not just nation-states.

RayV Lite's creators explain low-cost laser fault injection: consumer green laser pointers leak 1064 nm infrared, and lower-power lasers trigger faults via longer exposure and clock-cycle alignment.

NetSPI defines proactive security as a shift from reactive patching to seeking unknown risks, built on three pillars: discovering exposures, prioritizing critical issues, and confirming remediation.

NetSPI explains what makes a valuable penetration testing report, covering vulnerability identification, demonstrated impact, prioritized remediation, and how tracking findings aids security visibility.