joeware - never stop exploring... :)

You may recall I previously ranted on twitter (https://twitter.com/joewaredotnet/status/1432548671527264258?s=20&t=LMw3UZ9dddXhxVPs8dKa7A) that MSFT added TLS 1.3 for HTTPS for Windows Server 2022 but neglected to add it for AD. Well someone listened. You are welcome.   [Sat 07/09/2022 20:54:17.43] C:\temp>adfind -h k22-ese.k22-ese-dom.test.loc -sslinfo AdFind V01.59.00cppBETA Joe Richards (support@joeware.net) June 2022 dn:CN=Certificate Info,CN=k22-ese.k22-ese-dom.test.loc > ciEncodingType: X509_ASN_ENCODING (0x01) > […]

I have uploaded the new versions of AdFind and AdMod to www.joeware.net for download. Note that I know that a lot of anti-malware has been reporting AdFind.exe as malware now, usually some form of LOLBIN or PUA. The reason for this is because the hacker collectives are using the tool for scanning Active Directory environments […]

I was about to add some code to AdFind to export Security Descriptors in binary export/import format and found out I already had written that code. I apparently used a bad switch name for it though because I didn’t intuitively know what it was and find it by accident. That or my brain was in […]

Rating 4.75 out of 5

I know I said I was putting them away, and I did. I locked down the code and started looking into other things. However, three separate bugs in Windows, well two bugs in the OS and one in a Windows tool (my opinion on the bugs, not an admission from MSFT) that I couldn’t stand […]

My blogging ability has been hampered for a while because OpenLiveWriter wasn’t working for me and throwing 409 Conflict errors when trying to talk to my blog. My last couple of posts were done through the web interface and anyone who knows me knows I don’t much like web interfaces, including the WordPress editor interface. […]

Look no further, check out the custom ornament my niece put together just for 2020. https://www.etsy.com/shop/CustomDesignByBrooke ENJOY!    joe Rating 4.00 out of 5

https://thedfirreport.com/2020/10/08/ryuks-return/ This isn’t the first I have read about AdFind being used by bad actors, it won’t be the last. I first started hearing about AdFind being used in exploits and recon work roughly 2.5 or so years ago when IR teams and Security Researchers started emailing me about it and asking for hashes of […]