ãƒãƒƒã‚«ãƒ¼ã¯hekatombã§LDAPディレクトリã«æŽ¥ç¶šã—ã¦ã™ã¹ã¦ã®ã‚³ãƒ³ãƒ”ューターã¨ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã‚’å–å¾—ã™ã‚‹(Kali Linux) | AIã‚’æ¦å™¨ã«ãƒ›ãƒ¯ã‚¤ãƒˆãƒãƒƒã‚«ãƒ¼ã«ãªã‚‹hekatomb㯠Kali Linux 2024.3 リリース時ã«è¿½åŠ ã•ã‚ŒãŸãƒ„ールã§ã™ã€‚ hekatombã¨ã¯ Hekatomb ã¯ã€LDAPディレクトリã«æŽ¥ç¶šã—ã¦ã™ã¹ã¦ã®ã‚³ãƒ³ãƒ”ューターã¨ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã‚’å–å¾—ã™ã‚‹Pythonスクリプトã§ã™ã€‚ 次ã«ã€ã™ã¹ã¦ã®ã‚³ãƒ³ãƒ”ューターã‹ã‚‰ã™ã¹ã¦ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ã™ã¹ã¦ã®DPAPIブãƒãƒ–をダウンãƒãƒ¼ãƒ‰ã—ã¾ã™ã€‚ 最後ã«ã€RPCを介ã—ã¦ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ©ãƒ¼ã®ç§˜å¯†éµã‚’抽出ã—ã€ãれを使用ã—ã¦ã™ã¹ã¦ã®è³‡æ ¼æƒ…å ±ã‚’å¾©å·åŒ–ã—ã¾ã™ã€‚ LDAPディレクトリã¨ã¯ LDAPディレクトリ（Lightweight Directory Access Protocolディレクトリ）ã¯ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã§ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚„デãƒã‚¤ã‚¹ã€ãã®ä»–ã®ãƒªã‚½ãƒ¼ã‚¹ã«é–¢ã™ã‚‹æƒ…å ±ã‚’åŠ¹çŽ‡çš„ã«ç®¡ç†ã™ã‚‹ãŸã‚ã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã®ä¸€ç¨®ã§ã™ã€‚LDAPã¯ã€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚µãƒ¼ãƒ“スã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ãŸã‚ã®ãƒ—ãƒãƒˆã‚³ãƒ«ï¼ˆé€šä¿¡è¦ç´„）ã§ã€ç‰¹ã«èªè¨¼ã‚„ユーザー管
Pentesting LDAP Servers
Pentesting with Secure LDAP and LDAP Channel Binding
Port 389 | LDAP | Pentest Everything
ð“ðžðœð¡ð§ð¢ðªð®ðžð¬ ðšð§ð ð“ð¨ð¨ð¥ð¬ ð¢ð§ ð‹ðƒð€ð ð„ð±ð©ð¥ð¨ð«ðšðð¢ð¨ð§
Shadow Credentials
Shadow Credentials: Abusing Key Trust Account Mapping for Account Takeover
https://www.guidepointsecurity.com/blog/beyond-the-basics-exploring-uncommon-ntlm-relay-attack-techniques/
Manual LDAP Querying: Part 2
Defining Shadow Access- The Emerging IAM Security Challenge | CSAJC
LDAP - Qiita
LDAP Cybersecurity Risks and Prevention Techniques | UpGuard
LDAP Ports Explained: Configuring Standard, StartTLS, And LDAPS Connections - ITU Online
LDAP (Lightweight Directory Access Protocol) Pentesting | Exploit Notes
GitHub - pentesterhubcommunity/Bug_Bounty: "Bug_Bounty_Hunting: Your comprehensive resource hub for all things bug bounty – featuring study materials, tools, and techniques to elevate your cyber-security skills."
Uncovering Adversarial LDAP Tradecraft
GitHub - fortra/impacket: Impacket is a collection of Python classes for working with network protocols.
What is LDAP Authentication? How Does It Work? | Fortinet
LDAP Relay | Pentest Everything
Safe to expose Active Directory via LDAPS externally?
{{#tags}}- {{label}}
{{/tags}}