improve scoring for LDAP signing and CB

netwrix / pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

https://www.pingcastle.com

Other

2.35k stars 292 forks source link

Closed ruppde closed 4 months ago

ruppde commented 4 months ago

increase score for missing LDAP signing and channel binding because that enables a bunch of coercion & relaying attacks, see https://github.com/zyn3rgy/LdapRelayScan?tab=readme-ov-file#references
update MS link to a newer one

vletoux commented 4 months ago

Same remark about the score that in my previous PR comment.

I replaced the link to the updated version for the next version of PingCastle to be delivered soon. Thanks for the suggestion.