Him: Good luck, we're all counting on you.
Him: Just grabbed the domain admin’s *user* password. Me: Give it. Let’s see if they reused the pass for their DA account. Him: Surely, they wouldn’t. Me, looking at my access: They would. And don’t call me Shirley.pic.twitter.com/0BYBJWOp47
-
Novi razgovor
-
-
-
We got pwned on a pentest by this exact flaw and my boss had to talk my down from dragging the admin in question down the hall by his neck.
-
One time when I reported it, the client said "We talked to him about it, he didn't know better." Umm, if he doesn't know better than to have the same password, he probably should not be a Domain Administrator in your environment.
- Još 4 druga odgovora
Novi razgovor -
-
-
The other day I pwned two DA accounts in a massive and sensitive network by "finding" their passwords - the passwords were reused and they also hadn't been changed in about 16 years.
- Još 2 druga odgovora
Novi razgovor -
-
-
The Internet has been won today. Everybody else can go home.
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
Ow boy
and surely it wasn’t Company2018! -
C0mpany2019! Please
Kraj razgovora
Novi razgovor -
-
-
Roger Roger, what was the vector Victor?
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.