In today’s post we are going to exploit one-way trust relationships, from an inbound point of view. If you haven’t seen it yet, take a look at this post first, in which I explain the basics of trust relationships in an active directory, the different relationships that forests have and how to exploit a two-way … Read more
Let’s continue with the posts on Red Teaming. After the post on how to exploit misconfigured Certificate Templates, today we will talk about the forests, the trust relationships that are established between the different domains, and how to abuse them to pivot and gain access to other domains. Basic Concepts Let me first define some … Read more
Today I would like to talk about a vulnerability that I have found frequently in the Red Team exercises I have participated in. It is the exploitation of misconfigured Active Directories Certificate Templates. Context First of all, let’s put a bit of context to the scenario we find ourselves in. We assume that we have … Read more