Blog

The File System Access API (short: FSA API) allows web applications to access files and directories on the local file system. Depending on the permissions granted, they can read and modify files. To do so, the user must first grant access. It is precisely this interaction that opens up a potential attack vec-tor for attackers: They can attempt to use social engineering to trick users into granting a manipulated website access to a directory.

It has now been over ten years since Tim Medin introduced the so-called Kerberoasting attacks. And even today, Kerberoasting remains a reliable attack technique against Microsoft Active Directory, which is often exploited by penetration testers and red teamers. With a valid domain account, the attack can be carried out in an Active Directory environment without extended privileges. Afterwards, an attempt can calmly be made to crack the passwords of service accounts offline.

Purple teaming refers to the close cooperation between attacking (red team) and defending (blue team) security forces. Instead of acting independently, they jointly develop targeted attack scenarios, carry them out together, and analyze the results in direct exchange. This collaborative approach not only allows for vulnerabilities to be uncovered more efficiently but also addresses them directly with appropriate defensive measures.