crack.sh | The World's Fastest DES Cracker
Here's random stuff related to what I am working on or interested in during my work day or in my personal life. I'm a nerd. The content will be nerdy.
If you can edit gpLink, you can link to user and machine group polices that do not reside on domain controllers . They can reside on your server or workstation and you can do as you wish with them. Yes, you read that right, GPOs can be hosted on member servers or workstations. The attack requires a foothold, but one that is too common.
I’ve submitted this issue to Microsoft, my employer at the time, and it has been deemed a feature, not a bug and no fix needed. I tend to agree with this, as it can be used for good or evil. None the less, the mistake that allows the attack is a common configuration failure.
crack.sh | The World's Fastest DES Cracker