corpus.blog
41,554 blogs · 4,969,865 posts Claim your blog
Record · corpus.blog/posts/01a0ca6b-18f1-731a-b54d-b9f5129e6d68

NTLM relaying to AD CS - On certificates, printers and a little hippo

dirkjanm.io · published 28 July 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at dirkjanm.io Wayback capture
1blogs citing
First cited
4 Nov 2022
Most recent
4 Nov 2022
Rank this month
not ranked
External links
23
Words captured
2,914

Cited by

Blog
In the post
Date
SensePost
CertPotato – Using ADCS to privesc from virtual and network service accounts to local system Read at the source ↗
4 Nov 2022

Links from this post

Link
Host
https://github.com/dirkjanm/PKINITtools
github.com
https://support.microsoft.com/en-us/topic/2020-ldap-channel-binding-and-ldap-signing-requirements-for-windows-ef185fb8-00f7-167d-744c-f299a66fc00a
support.microsoft.com
https://github.com/leechristensen/SpoolSample/
github.com
https://twitter.com/tifkin_
twitter.com
https://twitter.com/harmj0y
twitter.com
https://posts.specterops.io/certified-pre-owned-d95910965cd2
posts.specterops.io
https://twitter.com/topotam77
twitter.com
https://github.com/topotam/PetitPotam
github.com
https://github.com/SecureAuthCorp/impacket/blob/master/impacket/examples/ntlmrelayx/attacks/httpattack.py
github.com
https://github.com/SecureAuthCorp/impacket/pull/1101
github.com
https://github.com/dirkjanm/PKINITtools/blob/master/ntlmrelayx/httpattack.py
github.com
https://github.com/GhostPack/Rubeus/
github.com
https://github.com/gentilkiwi/kekeo
github.com
https://github.com/morRubin/AzureADJoinedMachinePTC
github.com
https://github.com/skelsec/minikerberos
github.com
https://www.specterops.io/assets/resources/Certified_Pre-Owned.pdf
specterops.io
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-pac/cc919d0c-f2eb-4f21-b487-080c486d85fe
docs.microsoft.com
https://datatracker.ietf.org/doc/html/draft-ietf-cat-user2user-02
datatracker.ietf.org
https://shenaniganslabs.io/2019/01/28/Wagging-the-Dog.html
shenaniganslabs.io
https://posts.specterops.io/another-word-on-delegation-10bdbe3cd94a
posts.specterops.io
https://twitter.com/gladiatx0r/
twitter.com
https://gist.github.com/gladiatx0r/1ffe59031d42c08603a3bde0ff678feb
gist.github.com
https://support.microsoft.com/en-us/topic/kb5005413-mitigating-ntlm-relay-attacks-on-active-directory-certificate-services-ad-cs-3612b773-4043-4aa9-b23d-b87910cd3429
support.microsoft.com
Elsewhere on dirkjanm.io (3)