In this article, written as a part of a series devoted to Windows security, we will learn quite a simple method for getting passwords of all active Windows users using the Mimikatz tool.
Mimikatz.exe can extract plain text passwords from Windows memory, password hashes, Kerberos tickets, etc. Also, mimikatz allows you to perform pass-the-hash, pass-the-ticket attacks or generate Golden Kerberos tickets. The mimikatz functionality is also available in the Metasploit Framework.
You can use RDS Drain Mode to maintain terminal hosts in a Remote Desktop Services farm. If you enable Drain Mode for your RDS server, you can prevent the server…
Simple Network Management Protocol (SNMP) is used to get information about the current status of servers, network equipment, printers or other IP devices. You can get different metrics through SNMP:…
You can use the built-in iCACLS tool to manage NTFS permissions on Windows. The icacls.exe command line tool allows you to get or change Access Control Lists (ACLs) for files…
In this article we will show how to reset the administrator password on the HPE server management board — Integrated Lights-Out (ILO). This guide is based on iLO v4, but…
Managed Service Account (MSA) is a special type of Active Directory account that can be used to securely run services, applications, and scheduled tasks. The basic idea is that the…
The Just Enough Administration (JEA) feature is available starting from PowerShell version 5.0 and allows you to delegate administrative privileges to anything you can manage with PowerShell. The main purpose…
Recent builds of Windows 10 have a bug due to which mapped network drives may fail to automatically reconnect at Windows startup. After logging in the user sees a big…
“The RPC server is unavailable” error appears on Windows when a communication error occurs between two computers in a network. Your computer (an RPC client) cannot connect to a remote…
You can use PowerShell’s features to create ZIP archives and extract them. In PowerShell 5.0 (this PowerShell version is installed by default on Windows 10), a separate module Microsoft.PowerShell.Archive is…