Conversation

Notices

1. Embed this notice
   SecurityShrimp @shmoocon :verified: (securityshrimp@infosec.exchange)'s status on Tuesday, 28-Jan-2025 22:25:16 JST SecurityShrimp @shmoocon :verified:

   • Jake Hildreth (acorn) :blacker_heart_outline:

   @horse any chance there's a way to specify the domain in locksmith? Looked at the code but don't see a parameter for that. The domain im auditing is like Foo.bar.com but locksmith is only pulling bar.com so it can't find any adcs servers

   • Embed this notice
     Jake Hildreth (acorn) :blacker_heart_outline: (horse@infosec.exchange)'s status on Tuesday, 28-Jan-2025 22:25:13 JST Jake Hildreth (acorn) :blacker_heart_outline:

     in reply to

     @securityshrimp Not sure how I missed this. It should be identifying CA hosts regardless of domain since the Configuration partition is forest-wide. Do you have some time this week or late next week to do a screen sharing session?

   • Embed this notice
     Jake Hildreth (acorn) :blacker_heart_outline: (horse@infosec.exchange)'s status on Tuesday, 28-Jan-2025 22:25:38 JST Jake Hildreth (acorn) :blacker_heart_outline:

     in reply to

     @securityshrimp Or, just send me a PowerShell transcript: jake@dotdot.horse