(07)專案管理

2025-11-12

14:05 01_外部專案 專案資訊 #1065 (Resolved-解决): Cleartext Passwords Stored in Domain Attributes

周益利

14:03 01_外部專案 專案資訊 #1065: Cleartext Passwords Stored in Domain Attributes

修正後
!clipboard-202511121402-ygxdf.png!
!clipboard-202511121403-urzvw.png!
周益利

14:01 01_外部專案 專案資訊 #1065 (In process-進行中): Cleartext Passwords Stored in Domain Attributes

修正前
!clipboard-202511121400-qb9lr.png!
!clipboard-202511121400-m2mvt.png!
周益利

2025-11-10

13:33 01_外部專案 專案資訊 #1089 (Closed-關閉): Dangerous Permission over DNSAdmins Group

bookmark20250527164529819756743971 "Dangerous Permission over DNSAdmins Group
" Granting excessive permissions to... LiaoJoy

13:33 01_外部專案 專案資訊 #1088 (Closed-關閉): Dangerous Permission over adminSDHolder

bookmark2025052717152717274892035 "Dangerous Permission over adminSDHolder
" "Granting dangerous permissions over... LiaoJoy

13:33 01_外部專案 專案資訊 #1087 (Closed-關閉): Dangerous Permission over Domain Controllers Group

bookmark20250527172903274457208324 "Dangerous Permission over Domain Controllers Group
" Unrestricted Domain Cont... LiaoJoy

13:32 01_外部專案 專案資訊 #1086 (Closed-關閉): Dangerous Permission over MicrosoftDNS server objects

bookmark20250528101140588319445694 "Dangerous Permission over MicrosoftDNS server objects
" Excessive permissions... LiaoJoy

13:32 01_外部專案 專案資訊 #1085 (In process-進行中): Dangerous Permission over Privileged Objects Containers

bookmark20250528113440590525911882 "Dangerous Permission over Privileged Objects Containers
" Unrestricted access... LiaoJoy

13:32 01_外部專案 專案資訊 #1084 (In process-進行中): Object Owner Anomalies

bookmark20230424152607541378202907 "Object Owner Anomalies
" When domain objects are owned by non-admin users or ... LiaoJoy

13:32 01_外部專案 專案資訊 #1083 (Closed-關閉): Overly Permissive Non-Privileged Accounts

bookmark2025052818064551592624366 "Overly Permissive Non-Privileged Accounts
" "Granting special domain privilege... LiaoJoy

13:32 01_外部專案 專案資訊 #1082 (Closed-關閉): Privileged acccount outside from 'Protected Users' group

bookmark20230424152530055619155201 "Privileged acccount outside from 'Protected Users' group
" "Privileged users ... LiaoJoy

13:31 01_外部專案 專案資訊 #1081 (Closed-關閉): Privileged acccount outside from 'Protected Users' group

bookmark20230424152530055619155201 "Privileged acccount outside from 'Protected Users' group
" "Privileged users ... LiaoJoy

13:31 01_外部專案 專案資訊 #1080 (Closed-關閉): Presence of user principals in Schema Admins group

bookmark20250528012341779511785327 Presence of user principals in Schema Admins group "A non-empty Schema Admins gro... LiaoJoy

13:31 01_外部專案 專案資訊 #1079 (Closed-關閉): Non-restricted Domain Join with Excessive Machine Account Quota

N bookmark20250527150517990578686946 "Non-restricted Domain Join with Excessive Machine Account Quota
" Uncontroll... LiaoJoy

13:31 01_外部專案 專案資訊 #1078 (Closed-關閉): Dangerous Permission over Domain Context Root

N bookmark20250528093106041557187875 "Dangerous Permission over Domain Context Root
" Excessive permissions on the... LiaoJoy

13:31 01_外部專案 專案資訊 #1077 (Closed-關閉): Krbtgt Password Unchanged for over 1 year

N bookmark20250526231504779653815004 "Krbtgt Password Unchanged for over 1 year
" A stale krbtgt password enables ... LiaoJoy

13:30 01_外部專案 專案資訊 #1076 (Closed-關閉): SMB version 1 in use on Domain Controller

N "4.7.2
KB2696547
" "SMB version 1 in use on Domain Controller
" Microsoft recommends that users discontinu... LiaoJoy

13:30 01_外部專案 專案資訊 #1075 (Closed-關閉): ADCS Web Enrollment Enabled for high-privileged accounts

N bookmark20250529113929916258883991 "ADCS Web Enrollment Enabled for high-privileged accounts
" Enabling ADCS Web... LiaoJoy

13:30 01_外部專案 專案資訊 #1074 (Closed-關閉): Use of ""Pre-Windows 2000 Compatible Access

N bookmark2025052801463337292181788 "Use of ""Pre-Windows 2000 Compatible Access"" group
" "The “Pre-Windows 2000 ... LiaoJoy

13:30 01_外部專案 專案資訊 #1073 (Closed-關閉): SMB NULL Session Authentication allowed on Domain Controllers

"4.7.3
CWE-16
CWE-284
" "SMB NULL Session Authentication allowed on Domain Controllers
The SMB service on ... LiaoJoy

13:29 01_外部專案 專案資訊 #1072 (Closed-關閉): Privileged Accounts with Never Expiring Passwords

N bookmark20230424152553354013409667 "Privileged Accounts with Never Expiring Passwords
" Accounts with passwords ... LiaoJoy

13:29 01_外部專案 專案資訊 #1071 (Closed-關閉): Sensitive Data Stored in Domain Controller’s Network Shares

bookmark20250527015003600759977664 "Sensitive Data Stored in Domain Controller’s Network Shares
" "Storing sensit... LiaoJoy

13:29 01_外部專案 專案資訊 #1070 (Closed-關閉): Dangerous Permisson over GPO that applies to object with high privileges

NN bookmark20250528105554721728147917 "Dangerous Permisson over GPO that applies to object with high privileges
A... LiaoJoy

13:29 01_外部專案 專案資訊 #1069 (Closed-關閉): Dangerous Permisson over GPO that applies to object with high privileges

NN bookmark20250528105554721728147917 "Dangerous Permisson over GPO that applies to object with high privileges
A... LiaoJoy

13:28 01_外部專案 專案資訊 #1068 (Closed-關閉): Dangerous Permisson over GPO that applies to object with high privileges

NN bookmark20250528105554721728147917 "Dangerous Permisson over GPO that applies to object with high privileges
A... LiaoJoy

13:28 01_外部專案 專案資訊 #1067 (New-新增): Dangerous Permission over Accounts with Replication Rights

NN bookmark20250528021100422251172311 "Dangerous Permission over Accounts with Replication Rights
All domain users... LiaoJoy

13:28 01_外部專案 專案資訊 #1066 (Closed-關閉): Domain Admin Vulnerable to Kerberoasting Attack

NN "4.3.2
MITRE-T1558
" "Domain Admin Vulnerable to Kerberoasting Attack
It is possible to obtain the encryp... LiaoJoy

13:27 01_外部專案 專案資訊 #1065 (Closed-關閉): Cleartext Passwords Stored in Domain Attributes

NNN bookmark20250526222819601367469548 "Cleartext Passwords Stored in Domain Attributes
Several users, including d... LiaoJoy

13:23 01_外部專案 專案資訊 #1064 (New-新增): 2025-PenTest

ADPT_TAHO_Remediation Tracker
Severity Ref. Weakness
NNN bookmark20250526222819601367469548 "Cleartext Passwords St... LiaoJoy