#password-cracking

2 posts

AnalysisJun 9, 2026

Kerberoasting: Turning One Domain Account into a Pile of Service Passwords

Any authenticated user in an Active Directory domain can ask for tickets that are effectively offline password hashes for service accounts. Here is how Kerberoasting works, why it is so reliable, and how to shut it down.

11 min read·#active-directory#kerberos#windows

LearnMar 9, 2026

Password Hashing Explained: Salts, Slow Hashes, and Why Argon2 Beats SHA-256

Why storing passwords is harder than it looks, what a salt actually does, and why a fast hash like SHA-256 is the wrong tool for the job. A plain English primer for people learning security.

10 min read·#passwords#hashing#cryptography