Active Directory | writeups.xyz

Title	Vulnerabilities	Programs	Authors
SCCMSecrets.py: Exploiting SCCM Policies Distribution For Credentials Harvesting, Initial Access And Lateral Movement	Active Directory SCCM	Undisclosed	Quentin Roland (@Croco_byte)
Hello: I’m your Domain Admin and I want to authenticate against you	RCE Privilege Escalation Authentication Coercion Active Directory NTLM Internal Pentest	Microsoft	Ap (@Decoder_it)
Pwn Dat Domain: Becoming Domain Admin With A Little Help From Veeam Backup	Active Directory Red Team Internal Pentest	Undisclosed	Roberto Soares (@Espreto)
ADCS ESC13 Abuse Technique	ADCS Active Directory	Undisclosed	Jonas Bülow Knudsen
Entra ID Connect Arbitrary Password Overwrite	Post-Exploitation Active Directory Azure AD Cloud	Microsoft	Anthony Larcher-Gore (@Nullg0re)
Weaponizing DHCP DNS Spoofing — A Hands-On Guide	DHCP Active Directory DNS Spoofing	Microsoft	Ori David (@Oridavid123)
Spoofing DNS Records by Abusing DHCP DNS Dynamic Updates	DHCP Active Directory DNS Spoofing	Microsoft	Ori David (@Oridavid123)
Exploiting stale ADIDNS entries	Internal Pentest Active Directory	Undisclosed	Alain Mowat (@Plopz0r)
Hijacking Someone Else’s DCSync	Post-Exploitation Active Directory Azure AD Cloud	Microsoft	Anthony Larcher-Gore (@Nullg0re)
From NTAuthCertificates to “Silver” Certificate	ADCS Active Directory Persistence Internal Pentest	Undisclosed	Ap (@Decoder_it)
MSSQL linked servers: abusing ADSI for password retrieval	ADSI Active Directory Local Privilege Escalation	Undisclosed	Pablo Martínez (@Xassiz)
Anonymised Penetration Test Report	Internal Pentest RCE ADCS Active Directory Kerberos DHCPv6 LLMNR	Undisclosed	Volkis (@VolkisAU)
Protected Users: you thought you were safe uh?	Active Directory Kerberos NTLM Internal Pentest	Microsoft (Windows)	Aurélien Chalot (@Defte_) Thomas SEIGNEURET (@_Zblurx)
Azure Ad Kerberos Tickets: Pivoting To The Cloud	Active Directory Cloud Lateral Movement	Undisclosed	Edwin David
Relaying to AD Certificate Services over RPC	Active Directory ADCS Windows	Undisclosed	Sylvain Heiniger (@Sploutchy)
New Attack Paths? AS Requested Service Tickets	Local Privilege Escalation Windows Kerberos Active Directory	Microsoft	Charlie Clark (@Exploitph)
Diving Into Pre-created Computer Accounts	Active Directory Local Privilege Escalation Windows	Undisclosed	Oddvar Moe (@Oddvarmoe)

Page 1 of 1