Author: Jackson

Checking for Breached Passwords in Active Directory – Using k-Anonymity!

Posted on by Jackson

I’d like to preface this post by saying that I 100% understand concerns about using an external API, even when sending it just a small amount of unusable information. The possibility of compromise and subsequent infection on Domain Controllers is a true security risk and it is totally acceptable to not want to take that… Continue reading “Checking for Breached Passwords in Active Directory – Using k-Anonymity!” →

Checking for Breached Passwords in Active Directory

Posted on by Jackson

Edit: I have now overhauled the blog post and essentially recreated PwnedPasswordsDLL to run on-premises, and return results very quickly. Information regarding set-up and the new release can be found below. Changes have now been pushed to GitHub and are available for use. Introduction – In simplistic terms, PwnedPasswordsDLL will check a requested Active Direvtory… Continue reading “Checking for Breached Passwords in Active Directory” →