BlueTuxedo icon indicating copy to clipboard operation
BlueTuxedo copied to clipboard

Look for GlobalNames zone

Open jakehildreth opened this issue 2 years ago • 2 comments

Allows for single-name domains. Dangerous af.

See: https://learn.microsoft.com/en-us/previous-versions/technet-magazine/cc137727(v=msdn.10)

jakehildreth avatar Oct 13 '23 15:10 jakehildreth

Would love to hear an estimation of how often you seen these in your engagements, and what risks you see resulting from the use of them. It's not hard to imagine that they could be abused, but I haven't dug into the idea at all.

SamErde avatar Oct 23 '23 12:10 SamErde

Gotta start collecting this data on engagements first! (How to be doing this by year's end.)

jakehildreth avatar Oct 23 '23 12:10 jakehildreth