Password-Spraying on Domain Securityhttps://domainsecurity.agency/tags/password-spraying/Recent content in Password-Spraying on Domain SecurityHugoenThu, 10 Sep 2026 00:00:00 +0000HTB: Monteverde ยท leaked Azure AD Connect credentials to Domain Adminhttps://domainsecurity.agency/posts/htb-monteverde/Thu, 10 Sep 2026 00:00:00 +0000https://domainsecurity.agency/posts/htb-monteverde/A retired medium Windows Domain Controller where a leaked Azure AD sync credential in a home share gives a foothold, and a locally installed Azure AD Connect instance turns out to store the Domain Administrator’s password in a decryptable local database.