Source |
n00py |
Identifiant |
8300190 |
Date de publication |
2022-01-19 13:50:28 (vue: 2023-01-11 16:56:10) |
Titre |
Adding DCSync Permissions from Linux |
Texte |
Recently I came upon an attack path in BloodHound that looked like this: I had control of a computer object (an Exchange server) that effectively had WriteDacl over the domain. I had a few constraints as well: All systems were configured with EDR I only had the AES key of the computer account, not the... Read More |
Envoyé |
Oui |
Condensat |
account adding aes all attack bloodhound came computer configured constraints control dcsync domain edr effectively exchange few from had key like linux looked more not object only over path permissions read recently server systems that the this: upon well: were with writedacl |
Tags |
|
Stories |
|
Notes |
★★★★
|
Move |
|