Record · corpus.blog/posts/01a0e4e2-66c6-7327-b4a9-a627c7343232

Escalating privileges with ACLs in Active Directory

blog.fox-it.com · published 26 April 2018

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.fox-it.com Wayback capture

2blogs citing

First cited: 24 Sept 2018
Most recent: 1 Mar 2022
Rank this month: not ranked
Links from this post: 14
Words captured: 2,637

Cited by

Blog

In the post

Date

blog.ikuamike.io

Hack The Box: Forest Read at the source ↗

1 Mar 2022

dirkjanm.io

Abusing Exchange: One API call away from Domain Admin Read at the source ↗

21 Jan 2019

dirkjanm.io

Active Directory forest trusts part 1 - How does SID filtering work? Read at the source ↗

24 Sept 2018

dirkjanm.io

Presentations and external blogs Read at the source ↗

—

Links from this post

Link

Host

https://github.com/fox-it/Invoke-ACLPwn

github.com

https://github.com/CoreSecurity/impacket/blob/master/examples/ntlmrelayx.py

github.com

https://www.specterops.io/assets/resources/an_ace_up_the_sleeve.pdf

specterops.io

https://www.fox-it.com/en/insights/blogs/blog/inside-windows-network/

fox-it.com

https://github.com/fox-it/mitm6

github.com

https://support.microsoft.com/en-us/help/4034879/how-to-add-the-ldapenforcechannelbinding-registry-entry

support.microsoft.com

https://github.com/gdedrouas/Exchange-AD-Privesc

github.com

https://github.com/CoreSecurity/impacket

github.com

https://blogs.technet.microsoft.com/canitpro/2017/03/29/step-by-step-enabling-advanced-security-audit-policy-via-ds-access/

blogs.technet.microsoft.com

https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4715

docs.microsoft.com

https://technet.microsoft.com/en-us/library/ee681663.aspx

technet.microsoft.com

https://technet.microsoft.com/en-us/library/ff405676.aspx

technet.microsoft.com

https://github.com/BloodHoundAD/SharpHound

github.com

https://docs.microsoft.com/en-us/powershell/module/Microsoft.powershell.utility/convertfrom-sddlstring

docs.microsoft.com