17 matches found
CVE-2026-54121
🛡️ CVE-2026-54121 — Certighost CTI Investigation Active Directory Certificate Services Privilege Escalation / Domain Compromise Risk Created by Pratik Chhetri Report Date: 2026-07-28 📌 Executive Snapshot Field| Finding ---|--- CVE| CVE-2026-54121 Name| Certighost Vendor| Microsoft Component| Activ...
CVE-2026-54121-CertiGhost
CVE-2026-54121-CertiGhost This POC is the original POC code from https://github.com/aniqfakhrul/CVE-2026-54121/blob/main/certighost.py but with slight changes to use a computer object that we already controll instead of relying on creating a new computer that is generally limited through...
certighost
This repository does not have a README...
certighost-cve-2026-54121-slides
Certighost Slidev deck This directory contains the Slidev presentation for CVE-2026-54121.md. npm install npm run dev Other commands: npm run build npm run export The source deck is slides.md. Deck-wide styling is in style.css, and Mermaid settings are in setup/mermaid.ts...
CVE-2026-54121-CertiGhost
CVE-2026-54121 Certighost - patched fork A working fork of the proof-of-concept tool for CVE-2026-54121, also known as Certighost. Original research and PoC by @H0j3n and @aniqfakhrul detailed analysis at: https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26. This fork fixes the SAN...
CVE-2026-54121-PoC-Exploit
CVE-2026-54121 - AD CS "Certighost" Elevation of Privilege Framework-Toolkit Active Directory Certificate Services — Certighost → Domain Takeover Exploit Framework & Audit Toolkit For authorized security testing only. Legal Disclaimer & Responsible Use This tool is provided for educational and...
CVE-2026-54121-Certighost
🛡 AI Security Tool Module CVE-2026-54121: Active Directory Certificate Services Impersonation Certighost Official Security Audit Module for AI Security Tool Ecosystem 🌐 Web Demo • 📚 Project Website • 💬 Community Chat Website Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview...
Certighost-CVE-2026-54121
Document Type: Detection Use Case Related CVE: CVE-2026-54121 Certighost Author: Youssef Benchater Detection Use Case: Certighost CVE-2026-54121 This document describes the Splunk detection built for CVE-2026-54121. It follows the standard detection use case format so it can sit in a detection...
Active Directory Certificate Services CA Chase Configuration Checker
The Certighost NetExec SMB module checks Active Directory Certificate Services configuration for the EDITFATTRIBUTESUBJECTALTNAME2 chase flag associated with CVE-2026-54121...
Certighost_CVE-2026-54121
certighost-oneclick CVE-2026-54121（Certighost）一键化利用工具 —— 仅用于本地靶场/授权测试。 基于上游 PoC（@h0j3n 分析 / @aniqfakhrul 实现）改造的 Windows 原生版 ： 内置自研 WinDivert 重定向器（pydivert），一条命令完成"建号 → 重定向 → rogue 监听 → CA chase → 域控身份证书 → PKINIT → 域控机器账户 NT 哈希"，全程不停止 Server 服务、 不改动主机任何配置，退出即恢复。 与上游的差异（补丁清单）...
Exploit for Improper Authorization in Microsoft
certighost-oneclick CVE-2026-54121 Certighost – One-Click...
Exploit for Improper Authorization in Microsoft
CVE-2026-54121-CertiGhost This POC is the original POC code f...
Microsoft Fixes Certighost Flaw That Allowed Domain Controller Impersonation
Certighost allowed a low-privilege domain user obtain a valid Domain Controller certificate through AD CS. Microsoft patched the issue in the July security updates...
Exploit for Improper Authorization in Microsoft
CVE-2026-54121 Certighost - patched fork A working fork of...
Exploit for Improper Authorization in Microsoft
CVE-2026-54121 Certighost - patched fork A working fork of...
Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine. They codenamed the flaw Certighost. Because Domain Controller accounts carry directory...