Kerberos | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Obtaining Domain Admin from Azure AD by abusing Cloud Kerberos Trust	Azure AD Kerberos Privilege Escalation	Undisclosed	Dirk-Jan Mollema (@_Dirkjan)
Anonymised Penetration Test Report	Internal Pentest RCE ADCS Active Directory Kerberos DHCPv6 LLMNR	Undisclosed	Volkis (@VolkisAU)
Protected Users: you thought you were safe uh?	Active Directory Kerberos NTLM Internal Pentest	Microsoft (Windows)	Aurélien Chalot (@Defte_) Thomas SEIGNEURET (@_Zblurx)
From CVE-2022-33679 to Unauthenticated Kerberoasting	Kerberos MiTM Local Privilege Escalation Downgrade Attack	Microsoft (Windows)	Trampas Howe (@Trampashowe)
From Zero to Hero Part 2: From SQL Injection to RCE on Intel DCM (CVE-2022-21225)	SQL Injection Kerberos RCE Privilege Escalation Security Code Review	Intel	Julien Ahrens (@MrTuxracer)
From Zero to Hero Part 1: Bypassing Intel DCM’s Authentication by Spoofing Kerberos and LDAP Responses (CVE-2022-33942)	Authentication Bypass Kerberos RCE Privilege Escalation Security Code Review	Intel	Julien Ahrens (@MrTuxracer)
RC4 Is Still Considered Harmful	Kerberos MiTM Local Privilege Escalation Downgrade Attack	Microsoft (Windows)	James Forshaw (@Tiraniddo)
New Attack Paths? AS Requested Service Tickets	Local Privilege Escalation Windows Kerberos Active Directory	Microsoft	Charlie Clark (@Exploitph)

Page 1 of 1