Website Technology Profiler

{
  "PageContent": "<h3>Secure Identity | The blog – By Daniel Ulrichs</h3>This is part two of my RDP series on how to protect the communication, minimize the credentials exposure and how to use it in different delegation models.This time we will have a look at an interesting delegation model using RDGW and RDP Restricted Admin mode.I want to have a user dynamically/temporary member of an admin group. I don’t have JIT or JEA implemented so what can I do with built-in tools in the OS platform?With RDPRA we have the possibilities to be a special admin depending on which server we jump to. It can look something like this:In this example, we will grant a user Domain Admin rights temporarily, and in other cases he will just be a regular user.In part one I wrote about RDPRA and how it flips the users identity to the servers identity he logon to. If a user RDP to a server with Restricted Admin mode, he will thru that machine connect to other resources in that context. If we make that server a member of Domain Admins the user will become a Domain Admin only by landing on that machine, and it happens automatically only thru RDP.So, we start with stealing the setup from part one and add the server to Domain Admins group. Now when my user Tony connects to the server he is effectively a Domain Admin.Sure, we need to step up our game on logging and correlations of event logs to get a clear picture of who did what. This isn’t about Auditing, so I will save that for some other time.Continue reading →",
  "Url": "https://secureidentity.se",
  "IpAddress": "46.30.215.37",
  "ReverseDns": "webcluster2.webpod15-cph3.one.com",
  "Asn": null,
  "Http2": false,
  "Http3": false,
  "ResponseTimeMs": 1692,
  "StatusCode": 200,
  "ServerHeaders": [
    "Apache",
    "PHP/8.0.30"
  ],
  "Ssl": {
    "Issuer": "CN=E7, O=Let's Encrypt, C=US",
    "Subject": "CN=*.secureidentity.se",
    "NotBefore": "2025-12-22T11:15:42-08:00",
    "NotAfter": "2026-03-22T12:15:41-07:00",
    "SubjectAltNames": [
      "DNS Name=*.secureidentity.se",
      "DNS Name=secureidentity.se"
    ],
    "Hsts": false,
    "Ciphers": [],
    "Protocol": "Tls13",
    "DaysUntilExpiry": 49
  },
  "Cdns": [],
  "HostingHints": [],
  "Cms": [
    "WordPress",
    "WordPress (robots.txt)"
  ],
  "Frameworks": [
    "jQuery"
  ],
  "JsLibraries": [],
  "Analytics": [
    "Google Analytics UA",
    "Google Analytics GA4",
    "Segment"
  ],
  "AdsAndMarketing": [],
  "PaymentGateways": [],
  "EcommerceHints": [
    "PrestaShop"
  ],
  "SocialSignals": [],
  "MediaProviders": [],
  "SeoTags": [
    "content-type: text/html; charset=UTF-8"
  ],
  "HtmlLanguage": "en-US",
  "HasRobots": true,
  "HasSitemap": true,
  "SecurityHeaders": [],
  "CookiesObserved": [],
  "XhrApiHints": [],
  "SitemapCounts": {
    "total_urls": 5
  },
  "ChatWidgets": [],
  "ABTesting": [],
  "PrivacyConsent": [],
  "EmailMarketing": [],
  "WebFonts": [
    "Google Fonts"
  ],
  "DynamicJs": [
    "Bootstrap (CSS Classes)",
    "jQuery (CDN Detection)",
    "Server Technology: PHP/8.0.30",
    "Web Server: Apache",
    "jQuery (script Resource)",
    "React (Script Analysis)"
  ],
  "ResourceHosts": [
    "secureidentity.se",
    "platform-api.sharethis.com",
    "gmpg.org",
    "fonts.googleapis.com",
    "s.w.org"
  ],
  "CssFrameworks": [],
  "BuildTools": [],
  "ServerTech": [
    "Generator: WordPress 5.8.12",
    "PHP (inferred from WordPress)"
  ],
  "DatabaseHints": [],
  "PageTitle": "Secure Identity | The blog &#8211; By Daniel Ulrichs",
  "MetaDescription": null,
  "ImageCount": 4,
  "ScriptCount": 9,
  "LinkCount": 15,
  "Errors": [],
  "UiFrameworks": [
    "Bootstrap (Class Names)",
    "Vuetify (Class Names)",
    "Angular Material (Class Names)"
  ]
}