Exploit for Improper Certificate Validation in Microsoft

🗓️ 17 Aug 2022 21:13:49Reported by lsecqtType

A Powershell proof of concept that loads and automatically runs Certify and Rubeus from memory to exploit improper certificate validation in Microsoft. The POC scans for misconfigured certificate templates, requests a certificate for the Administrative user, and utilizes Rubeus to generate a ticket for privilege escalation. Tested on TryHackMe Labs.

Reporter	Title	Published	Views	Family All 64
GithubExploit	Exploit for Improper Certificate Validation in Microsoft	14 May 202209:27	–	githubexploit
GithubExploit	Exploit for Improper Certificate Validation in Microsoft	21 Feb 202609:35	–	githubexploit
GithubExploit	Exploit for Improper Certificate Validation in Microsoft	21 May 202603:02	–	githubexploit
GithubExploit	Exploit for Improper Certificate Validation in Microsoft	14 May 202209:27	–	githubexploit
GithubExploit	Exploit for Improper Certificate Validation in Microsoft	17 Oct 202306:29	–	githubexploit
ATTACKERKB	CVE-2022-26923	10 May 202200:00	–	attackerkb
ATTACKERKB	CVE-2022–26923 aka Certifried	21 Dec 202300:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday May 2022: Edge RCE, PetitPotam LSA Spoofing, bad patches	26 May 202221:21	–	avleonov
BDU FSTEC	The vulnerability of the Kerberos KDC component of the Active Directory service for Windows operating systems allows attackers to escalate their privileges.	13 May 202200:00	–	bdu_fstec
Circl	CVE-2022-26923	11 May 202204:00	–	circl