--- title: "Credential Dumping: AD User Comment" url: https://daily.dev/posts/credential-dumping-ad-user-comment-bvm3ednud source_url: https://www.hackingarticles.in/credential-dumping-ad-user-comment/ type: article source: "Hacking Articles" published: 2025-01-29T11:33:13.132Z updated: 2025-01-29T11:33:29.770Z tags: ["security", "cyber", "microsoft", "active-directory", "pentesting"] reading_time: 8 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Credential Dumping: AD User Comment **[Hacking Articles](https://daily.dev/sources/hackingarticlesin)** · 8 min read · 0 upvotes · 0 comments ## Summary The post discusses various tools and techniques used by attackers to enumerate and exploit Active Directory (AD) user passwords, including vulnerabilities in password attributes like UserPassword, UnixUserPassword, unicodePwd, and msSFU30Password. It covers key vulnerabilities such as CVE-2020-1472 (Zerologon) and CVE-2017-0144 (EternalBlue), and outlines methods to mitigate these risks, emphasizing encryption, access control, and regular auditing of permissions. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#microsoft](https://daily.dev/tags/microsoft), [#active-directory](https://daily.dev/tags/active-directory), [#pentesting](https://daily.dev/tags/pentesting) [View this post on daily.dev](https://daily.dev/posts/credential-dumping-ad-user-comment-bvm3ednud)