Paths to Power in Active Directory Part 6: ESC8 – The Coerced Crown

Explore the risks of privilege escalation in Active Directory through certificate manipulation, highlighting the ESC6 attack path and its implications for security.

Paths to Power in Active Directory Part 5: ESC6 – Under a False Sigil

Explore the risks of privilege escalation in Active Directory through certificate manipulation, highlighting the ESC6 attack path and its implications for security.

Paths to Power in Active Directory Part 4: ESC3 – In The Name of The Crown

Explore how misconfigured Active Directory Certificate Services can lead to privilege escalation through delegated authority, allowing low-privileged users to obtain Domain Admin access.

Paths to Power in Active Directory Part 2: ESC1 – No One, Yet Anyone

Learn how to exploit AD CS misconfigurations for privilege escalation from a low-privileged user to Domain Admin in Active Directory.

Application Security 202: Vulnerabilities Accepted

Studying how to accept vulnerabilities and secure applications

Privilege Escalation via File Descriptors in Privileged Binaries

Post on SetUID drop-privileges binaries with leaked file descriptors, allowing for PrivEsc. Covers how to exploit & a tool to streamline exploitation.

The Other Replicating Directory Changes

What is the difference between Replicating Directory Changes, Replicating Changes in Filtered Set, and Replicating Directory Changes – All?