DavRelayUp

DavRelayUp 다음 공격 프리미티브를 남용하기 위해 webdav에서 LDAP으로의 NTLM 릴레이를 허용하도록 수정한 KrbRelayUp의 빠르고 대충 만든 포트입니다. 0. 선택 사항 새 컴퓨터 계정 생성 New-MachineAccount 1. WebClient 서비스 강제 시작 2. webdav 릴레이 서버 시작 GoRelayServer - Costura.Fody를 사용해 DavRelayUp에 포함된 golang DLL 3. 로컬 컴퓨터 계정 인증 강제 SharpSystemTriggers 4. LDAP으로 NTLM 릴...

KrbRelayUp

KrbRelayUp Rubeus と KrbRelay の機能の一部（および謝辞セクションにあるその他の honorable mentions）をラップしたシンプルなツールで、以下の攻撃プリミティブの悪用を効率化します。 0. （任意）新しいマシンアカウントの作成（New-MachineAccount） 1. ローカルマシンアカウントの認証強制（KrbRelay） 2. LDAP への Kerberos リレー（KrbRelay） 3. RBCD 権限を追加し、ローカルマシンへの特権 ST を取得（Rubeus） 4. その ST を使用してローカルの Service Manager...

Detecting and preventing privilege escalation attacks leveraging Kerberos relaying (KrbRelayUp)

On April 24, 2022, a privilege escalation hacking tool, KrbRelayUp, was publicly disclosed on GitHub by security researcher Mor Davidovich. KrbRelayUp is a wrapper that can streamline the use of some features in Rubeus, KrbRelay, SCMUACBypass, PowerMad/SharpMad, Whisker, and ADCSPwn tools in...

Detecting and preventing privilege escalation attacks leveraging Kerberos relaying (KrbRelayUp)

On April 24, 2022, a privilege escalation hacking tool, KrbRelayUp, was publicly disclosed on GitHub by security researcher Mor Davidovich. KrbRelayUp is a wrapper that can streamline the use of some features in Rubeus, KrbRelay, SCMUACBypass, PowerMad/SharpMad, Whisker, and ADCSPwn tools in...