I find some well-written documentation on NTLM/Kerberos and Constrained Delegation in W2k3 to share with my colleagues. They are useful as introduction and reference materials. NTLM http://davenport.sourceforge.net/ntlm.html Kerberos http://www.microsoft...

The concept of LDAP injection is similar to SQL injection, except that the target is Active Directory or any LDAP server. The idea is to inject untrusted data into a LDAP query by malicious users. Here comes a paper to explain that. http://www.spidynamics...