Paths to Power in Active Directory Part 6: ESC8 – The Coerced Crown
Explore the risks of privilege escalation in Active Directory through certificate manipulation, highlighting the ESC6 attack path and its implications for security.
No Hash? No Problem! – ASERepCatcher
Learn how to capture and crack Kerberos authentication traffic with ASRepCatcher, a powerful tool for internal penetration testing and credential interception.
Paths to Power in Active Directory Part 5: ESC6 – Under a False Sigil
Explore the risks of privilege escalation in Active Directory through certificate manipulation, highlighting the ESC6 attack path and its implications for security.
Paths to Power in Active Directory Part 4: ESC3 – In The Name of The Crown
Explore how misconfigured Active Directory Certificate Services can lead to privilege escalation through delegated authority, allowing low-privileged users to obtain Domain Admin access.
Paths to Power in Active Directory Part 3: ESC2 – The Seal of Any Purpose
Power in Active Directory, much like power in Westeros, often changes hands not through force, but through misplaced trust.
Paths to Power in Active Directory Part 2: ESC1 – No One, Yet Anyone
Learn how to exploit AD CS misconfigurations for privilege escalation from a low-privileged user to Domain Admin in Active Directory.
Paths to Power in Active Directory Part 1: How AD CS Misconfigurations Become the Keys to the Kingdom
From regular domain user to Domain Admin in minutes. Discover how AD CS misconfigurations create one of Active Directory’s most abusable attack paths.
Mitigating Exploitation Risks in Active Directory Certificate Services
active directory, ad, certificate templates, AD CS
The Other Replicating Directory Changes
What is the difference between Replicating Directory Changes, Replicating Changes in Filtered Set, and Replicating Directory Changes – All?
Computers are People Too
There are those rare times during pen tests, when you are on a client’s network and you don’t have any valid domain credentials but you do have local admin