ResetNightmare

ResetNightmare Proof-of-concept POC tool for ResetNightmare CVE-2026-27912. ResetNightmare is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched...

ResetNightmare-impacket

ResetNightmare — CVE-2026-27912 Linux / impacket tooling for CVE-2026-27912 "ResetNightmare". Resets a target Active Directory account's password by requesting a kadmin/changepw TGT for an NTENTERPRISE principal whose name is the target's sAMAccountName, using an account UPNUser on which we can...

Unable to Sign On to SecureHub

Enrolled User unable to login to Secure Hub, while 2 users in Active Directory have same UPNUserPrincipalName. The Active Directory Users and Computers MMC ADUC will enforce unique values, However, duplicate values for userPrincipalName can be assigned to the users via code. Consider In AD that 2...

Resolve Username Being Modified Before Sending to RADIUS Server Using NetScaler nFactor

Introduction nFactor is the next generation authentication framework that offers great flexibility in configuring authentication flows for users. nFactor allows for extensible authentication models thus offering clean separation of workflows. This framework could be used to configure all the...

How to Use sAMAccountName and userPrincipalName at Same Time for User Logon with Active Directory

This article describes how use sAMAccountName and userPrincipalName at same time for user logon with Active Directory. Background While authenticating with LDAP for NetScaler Gateway or any other resource behind the NetScaler, we can only access resources using either 'domain\username' or...