Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bake in an Active Directory Certificate Services (ADCS) vulnerability! #24

Open
7MinSec opened this issue Apr 26, 2023 · 1 comment
Open

Bake in an Active Directory Certificate Services (ADCS) vulnerability! #24

7MinSec opened this issue Apr 26, 2023 · 1 comment
Assignees
@7MinSec
Labels
v3 Things to address in LPLITE v3

Comments

@7MinSec
Copy link
Owner

7MinSec commented Apr 26, 2023 •
edited
Loading

Would love to....but will mark this as a v3 enhancement for the future.

And I need to update this ticket when I revisit ADCS vuln: AlmondOffSec/PassTheCert#13
@7MinSec 7MinSec added the v3 Things to address in LPLITE v3 label Apr 26, 2023
@7MinSec 7MinSec mentioned this issue Apr 28, 2023
Open
@7MinSec
Copy link
Owner Author

7MinSec commented May 7, 2023

Need to install ADCS to play first: https://www.hackingarticles.in/domain-escalation-petitpotam-ntlm-relay-to-adcs-endpoints/

Actually THIS might be a better resource instead: https://medium.com/r3d-buck3t/domain-takeover-with-petitpotam-exploit-3900f89b38f7

@7MinSec 7MinSec changed the title Bake in an Active Directory Certificate Services vulnerability! Bake in an Active Directory Certificate Services (ACCS) vulnerability! May 7, 2023
@7MinSec 7MinSec changed the title Bake in an Active Directory Certificate Services (ACCS) vulnerability! Bake in an Active Directory Certificate Services (ADCS) vulnerability! May 7, 2023
@7MinSec 7MinSec self-assigned this May 17, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@7MinSec 7MinSec

Labels
v3 Things to address in LPLITE v3
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@7MinSec