Defeat Domain User Spraying & Brute Forcing of Passwords

December 28, 2011

This post comes to you from Lamar Spells of http://foxtrot7security.blogspot.com/.
A while back, LaNMaSteR53 (Tim Tomes) discussed a method for brute forcing domain default passwords while avoiding account lockout. This discussion was in response to a video by Dave Hoelzer on using PowerShell to hack domain user accounts.

Defeat Domain User Spraying & Brute Forcing of Passwords

This post comes to you from Lamar Spells of http://foxtrot7security.blogspot.com/. A while back, LaNMaSteR53 (Tim Tomes) discussed a method for brute forcing domain default passwords while avoiding account lockout. This discussion was in response to a video by Dave Hoelzer on using PowerShell to hack domain user accounts. The method proposed by LaNMaSteR53 relied on […]

Learn More

Tim Tomes

Identity

Okta Classic customers told to check logs for sign-on bypass

Steve ZurierOctober 7, 2024

Security pros say teams running Okta Classics should take immediate action, checking their logs for exploitation.

Identity

How modern IAM can mitigate risk

Paul WagenseilOctober 4, 2024

Creaky old identity-management systems can't keep up with today's cloud-based, remote, zero-trust workplaces. Here's how a modern IAM system prepares your organization for the future.

A close-up view of the Telegram messaging app is seen on a smart phone on May 25, 2017 in London, England. SafeGuard Cyber Division Seven (D7) threat intelligence team located and confirmed an instance where a company’s employees had been targeted in a previously-known cryptocurrency impersonation scheme as far back as July 2022. (Photo by Ca...

Privacy

Telegram reportedly shared user data with US law enforcement

SC StaffOctober 4, 2024

Aside from the U.S., Telegram also provided data to fulfill legal requests from Brazil, India, and Europe, noted Telegram CEO Pavel Durov.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Defeat Domain User Spraying & Brute Forcing of Passwords