Java Management Extensions (JMX) and Java Authentication and Authorization Service (JAAS) Security Mechanisms
JMX provides security controls for Java application monitoring interfaces through authentication and encryption protocols. When configuring remote JMX access, two primary security measures include credential verification and transport layer encryption.
1. Configuring Remote JMX Access
Enable JMX remote capabilities using JVM parameters:
-Dcom. ...
Posted on Sun, 20 Sep 2026 16:52:12 +0000 by cedricm
Active Directory Privilege Escalation via Critical CVE Exploitation and Misconfiguration
Kerberos PAC Validation Bypass (CVE-2014-6324)
This vulnerability exploits improper validation of the Privilege Attribute Certificate (PAC) during Kerberos ticket-granting requests. Successful execution requires valid credentials for a standard domain account combined with local administrative privileges on any domain-joined workstation. The at ...
Posted on Sun, 06 Sep 2026 16:51:49 +0000 by douceur
Understanding NTLM Relay and Kerberos Ticket Exploitation in Active Directory Environments
NTLM Hash Relaying
In modern Windows domains, direct plaintext credential extraction is increasingly difficult due to mitigations like KB2871997 and the default disabling of WDigest caching. How ever, attackers can bypas password cracking entirely by reusing captured NTLM authentication hashes—without ever needing to decrypt them. This techniqu ...
Posted on Thu, 07 May 2026 23:10:01 +0000 by computerzworld