Blog

Field notes and security analysis

Technical articles on AD, pentesting, OSINT, and defensive security.

Timeroasting: stealing passwords with a time request

How a simple NTP request can expose Active Directory machine accounts

  • active-directory
  • windows
  • ntlm
  • pentest