Spencer Alessi

icon indicating a website link https://links.spenceralessi.com

icon company Ethical Threat icon location Bob Ross Mountain Range icon location Pentester/sysadmin in rehab | AD Security Connoisseur | @EthicalThreat | Offsec at @SecurIT360 | Host of The Cyber Threat POV

Results 5 issues of Spencer Alessi

update owa plugin to use forms auth

3 comment

TLDR: This PR seeks to resolve the issue [OWA/EWS Plugins Authentication Failed with Valid Credentials](https://github.com/knavesec/CredMaster/issues/7) by changing the owa plugin to use forms auth instead of NTLM against the auto-discover...

Fixed ascii art becuase OCD

https://github.com/tomcarver16/ADSearch/issues/2 - For those who would like fewer OCD attacks during their engagements..

Add reference to .net4 & update wsus content dir

This pull request is to: 1. Add a reference and link to .NET 4.0 in `README.md` 2. Pull the WSUS Content Directory location from the SQL database instead of the...

"/user:" pattern won't detect uses of "/us:" or "u:"

1 comment

When using `net use` the following are all valid: ``` - /user: - /us: - /u: ``` However, only the first `/user:` is being detected currently. Via quick testing it...

enhancement

KRB-ERROR (6) : KDC_ERR_C_PRINCIPAL_UNKNOWN

Has anyone run into this issue before? Ran into this while attempting to abuse an ESC1. I tried targeting a number of admin accounts, all resulted in the same error....