Powermad

PowerShell MachineAccountQuota and DNS exploit tools Wiki https://github.com/Kevin-Robertson/Powermad/wiki Blog Post Beyond LLMNR/NBNS Spoofing - Exploiting Active Directory-Integrated DNS Functions MachineAccountQuota Functions DNS Functions Dynamic Updates Functions ADIDNS Functions Miscellaneo...

Sharpmad

Sharpmad C version of Powermad This is not yet complete and has not been fully tested. It's also missing the following: Invoke-DNSUpdate Get-KerberosAESKey Temp Readme ADIDNS Module Sharpmad.exe ADIDNS -Action new -Node test Action| Description ---|--- AddACE| Add ACE to node. Disable| Tombstone ...

CVE-2026-54121-CertiGhost

CVE-2026-54121-CertiGhost This POC is the original POC code from https://github.com/aniqfakhrul/CVE-2026-54121/blob/main/certighost.py but with slight changes to use a computer object that we already controll instead of relying on creating a new computer that is generally limited through...

Certifried CVE-2022-26923 Detect

Detects prerequisites for CVE-2022-26923 Certifried: authenticated LDAP access, ms-DS-MachineAccountQuota 0, AD CS enrollment service, and the Machine certificate template. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Certifried CVE-2022-26923 prerequisite conditions.""" from kittysploit...

noPac CVE-2021-42278/42287 Detect

Detects prerequisites for the noPac SamAccountName spoofing chain: authenticated LDAP access, ms-DS-MachineAccountQuota 0, and at least one domain controller computer object. Does not verify patch level. !/usr/bin/env python3 -- coding: utf-8 -- """Detect noPac CVE-2021-42278/42287 prerequisite...

ad-hardening-pentest-lab-

Active Directory Hardening & Mutual Pentest Lab A self-contai...

Samba Privilege Escalation

The vulnerability of the MachineAccountQuota function, which is used for creating accounts within a Samba network interface, relates to the ability to create accounts with elevated privileges. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...