POC-CVE-2026-54121-Certighost

CertiGhost CVE-2026-54121 - AD CS Chase Fallback 漏洞利用工具包 概述 CertiGhost 是 Active Directory 证书服务 AD CS 中的一个严重漏洞（CVSS 8.8），允许低权限域用户冒充域控制器并实现完全域接管。 CVE： CVE-2026-54121 CVSS： 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 补丁时间： 2026 年 7 月 14 日（Microsoft 安全更新） PoC 发布时间： 2026 年 7 月 24 日 受影响范围： 部署了 AD CS 企业 CA ...

The Fake Domain Controller You Didn’t See Coming: Detecting DCShadow Attacks Using Trellix NDR

The Fake Domain Controller You Didn’t See Coming: Detecting DCShadow Attacks Using Trellix NDR By Maulik Maheta and Chao Sun · December 17, 2025 Executive summary DCShadow is a covert post-exploitation technique that enables an attacker to impersonate a domain controller and make unauthorized,...

samba: Netlogon elevation of privilege vulnerability (Zerologon)

A flaw was found in the Microsoft Windows Netlogon Remote Protocol MS-NRPC, where it reuses a known, static, zero-value initialization vector IV in AES-CFB8 mode. This flaw allows an unauthenticated attacker to impersonate a domain-joined computer, including a domain controller, and possibly obta...