- Certified Pre-Owned: Abusing Active Directory Certificate Services https://posts.specterops.io/certified-pre-owned-d95910965cd2 13 comments netsec
Linking pages
- AD-Attack-Defense/README.md at master · infosecn1nja/AD-Attack-Defense · GitHub https://github.com/infosecn1nja/ad-attack-defense/blob/master/readme.md#discovery 19 comments
- Certifried: Active Directory Domain Privilege Escalation (CVE-2022–26923) | by Oliver Lyak | IFCR https://research.ifcr.dk/certifried-active-directory-domain-privilege-escalation-cve-2022-26923-9e098fe298f4 11 comments
- GitHub - ly4k/Certipy: Tool for Active Directory Certificate Services enumeration and abuse https://github.com/ollypwn/Certipy 7 comments
- Diving into Pre-Created Computer Accounts - TrustedSec https://www.trustedsec.com/blog/diving-into-pre-created-computer-accounts/ 4 comments
- AD CS relay attack - practical guide · Ex Android Dev https://www.exandroid.dev/2021/06/23/ad-cs-relay-attack-practical-guide/ 3 comments
- Going passwordless with Window Hello for Business and SCRIL - Cloudbrothers https://cloudbrothers.info/en/going-passwordless-whfb-scril/ 2 comments
- GitHub - ly4k/Certipy: Tool for Active Directory Certificate Services enumeration and abuse https://github.com/ly4k/Certipy 0 comments
- From Stranger to DA // Using PetitPotam to NTLM relay to Domain Administrato - Truesec https://blog.truesec.com/2021/08/05/from-stranger-to-da-using-petitpotam-to-ntlm-relay-to-active-directory/ 0 comments
- GitHub - GhostPack/ForgeCert: "Golden" certificates https://github.com/GhostPack/ForgeCert 0 comments
- GitHub - GhostPack/Certify: Active Directory certificate abuse. https://github.com/GhostPack/Certify 0 comments
- GitHub - srlabs/Certiception: An ADCS honeypot to catch attackers in your internal network. https://github.com/srlabs/Certiception 0 comments
Linked pages
- Wagging the Dog: Abusing Resource-Based Constrained Delegation to Attack Active Directory | Shenanigans Labs https://shenaniganslabs.io/2019/01/28/Wagging-the-Dog.html 38 comments
- Medium https://medium.com/m/signin?isDraft=1&operation=login&redirect=https%3A%2F%2Fmedium.com%2F%40jamie_34747%2F79d382edf22b%3Fsource%3D 19 comments
- /blog/2009/12/extended-protection-for-authentication/ https://msrc-blog.microsoft.com/2009/12/08/extended-protection-for-authentication/ 13 comments
- Black Hat USA 2021 | Briefings Schedule https://www.blackhat.com/us-21/briefings/schedule/#a-new-class-of-dns-vulnerabilities-affecting-many-dns-as-service-platforms-23563 3 comments
- GitHub - GhostPack/ForgeCert: "Golden" certificates https://github.com/GhostPack/ForgeCert 0 comments
- GitHub - GhostPack/Certify: Active Directory certificate abuse. https://github.com/GhostPack/Certify 0 comments
Related searches:
Search whole site: site:posts.specterops.io
Search title: Certified Pre-Owned. Active Directory Certificate Services… | by Will Schroeder | Posts By SpecterOps Team Members
See how to search.