Digging Your Talons In – New Take On Password Guessing

 

Talon automates a password guessing technique targeting Kerberos and LDAP within the Windows Active Directory environment.

 

Talon is an automated authentication tool for large scale attacks while remaining undetected. Talon has two main functions for performing successful password guessing attacks. The first is user enumeration to generate a list of valid users for attacks. Talon can provide more details about the valid users in a company’s active directory, giving you more information than just if the user exists or not. Talon utilizes Kerberos for enumeration.

 

Source code:

https://github.com/optiv/Talon

  • Copyright © 2024 Optiv Security Inc. All rights reserved.


  • No license, express or implied, to any intellectual property or other content is granted or intended hereby.


  • This blog is provided to you for information purposes only. While the information contained in this site has been obtained from sources believed to be reliable, Optiv disclaims all warranties as to the accuracy, completeness or adequacy of such information.


  • Links to third party sites are provided for your convenience and do not constitute an endorsement by Optiv. These sites may not have the same privacy, security or accessibility standards.


  • Complaints / questions should be directed to Legal@optiv.com