Lil Pwny
In this post I show how you can use some of the same tools that attackers use to generate a tailored custom password list to use with Lil Pwny, and find those risky passwords before they do. As the number of data breaches continue to rise, safeguarding your Active Directory
Lil Pwny
I'm excited to announce the release of Lil Pwny 3.2.0, featuring powerful new enhancements to the Active Directory password auditing tool. This update brings significant improvements and new features. Following NIST's recommendation in Section 5.1.1.2 of their Digital Identity Guidelines, Lil
Lil Pwny
A new year, and a new lease of life for Lil Pwny, which gets some love with the release of version 2.0.0 The new version can be found on GitHub Or can be installed from PyPI: python3 -m pip install --upgrade gitlab-watchman About Lil Pwny Lil Pwny is
Lil Pwny
💡This post is partially out of date, and should be read in combination with the version 2.0.0 release notes Now that we have our data from Active Directory, it is time to use Lil Pwny to audit the passwords. Getting Ready Installing Lil Pwny is simple from PyPI:
Lil Pwny
The first step in auditing passwords using Lil Pwny is to recover the passwords from Active Directory. Passwords in a Windows Domain Before we look at how to recover passwords, it is useful to know how Windows handles and stores passwords in general. Windows uses the NTLM (New Technology LAN
Lil Pwny
💡This post is partially out of date, and should be read in combination with the version 2.0.0 release notes About Lil Pwny is an application I created to check passwords from Active Directory against the list of compromised passwords from Have I Been Pwned, the collection of real