ResetNightmare

ResetNightmare 用于 ResetNightmare CVE-2026-27912 的概念验证（POC）工具。 ResetNightmare 是 Kerberos 更改密码协议中的一个验证缺陷，允许在不知道当前密码的情况下重置任何目标用户/计算机帐户的密码。 该攻击需要一个未打补丁的域控制器，并且能够在你控制的任何帐户上写入 userPrincipalName UPN。 或者，拥有在任何 OU 中创建新用户/计算机权限的攻击者也可以利用此漏洞，因为创建用户/计算机后，攻击者将获得对其的 GenericWrite 权限。 攻击流程 此脚本自动化整个攻击流程，并在执行后自行清理。...

ResetNightmare-impacket

ResetNightmare — CVE-2026-27912 Linux / impacket tooling for CVE-2026-27912 "ResetNightmare". Resets a target Active Directory account's password by requesting a kadmin/changepw TGT for an NTENTERPRISE principal whose name is the target's sAMAccountName, using an account UPNUser on which we can...

Unable to Sign On to SecureHub

Enrolled User unable to login to Secure Hub, while 2 users in Active Directory have same UPNUserPrincipalName. The Active Directory Users and Computers MMC ADUC will enforce unique values, However, duplicate values for userPrincipalName can be assigned to the users via code. Consider In AD that 2...

Resolve Username Being Modified Before Sending to RADIUS Server Using NetScaler nFactor

Introduction nFactor is the next generation authentication framework that offers great flexibility in configuring authentication flows for users. nFactor allows for extensible authentication models thus offering clean separation of workflows. This framework could be used to configure all the...

How to Use sAMAccountName and userPrincipalName at Same Time for User Logon with Active Directory

This article describes how use sAMAccountName and userPrincipalName at same time for user logon with Active Directory. Background While authenticating with LDAP for NetScaler Gateway or any other resource behind the NetScaler, we can only access resources using either 'domain\username' or...