10 matches found
CVE-2025-4404-POC
CVE-2025-4404 POC CVE-2025-4404에 대한 POC 도메인 컴퓨터 계정host/[email protected]이 있다면, 기본적으로 서비스를 추가할 수 있습니다. 그리고 krbPrincipalName과 krbCanonicalName을 설정할 수 있습니다. 기본적으로 FreeIPA 4.12.4 관리자 계정에는 krbCanonicalName 속성 값이 없습니다. krbPrincipalName 값을 사용하여 Kerberos 티켓을 요청할 수 있지만, 티켓에는 krbCanonicalName 값이...
SMB to HTTP relay version of Get NAA Creds
This module creates an SMB server and then relays the credentials passed to it to SCCM's HTTP server aka Management Point to gain an authenticated connection. Once authenticated it then attempts to retrieve the Network Access Accounts, if configured, from the SCCM server. This requires a computer...
Get NAA Credentials
This module attempts to retrieve the Network Access Accounts, if configured, from the SCCM server. This requires a computer account, which can be added using the samraccount module. Module Options msf use auxiliary/admin/sccm/getnaacredentials msf auxiliarygetnaacredentials show actions...
VulnCheck KEV: CVE-2022-26923
An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM...
Metasploit Weekly Wrap-Up
SAMR Auxiliary Module A new SAMR auxiliary module has been added that allows users to add, lookup, and delete computer accounts from an AD domain. This should be useful for pentesters on engagements who need to create an AD account to gain an initial foothold into the domain for lateral movement...
Domain Escalation – sAMAccountName Spoofing
Computer accounts have the $ sign appended at the end of their names in contrast with standard user accounts. By default Microsoft operating systems lack… Continue reading - Domain Escalation - sAMAccountName Spoofing...
MCS-provisioned VDA dropped out of the domain after OS upgrade
Following an OS upgrade, MCS-provisioned VDAs leave their domain on reboot. You may also observe computer account password resets at that time...
MCS Unable to add machines to catalog Failed to create a computer account,due to an unknown error
You may be unable to add machines to catalog, receiving error "Failed to create a computer account , due to an unknown error." after 9 machines are added Error details: etting error. Transaction ID: Action Name: MCAddMachineInitialzation An error occurred. Contact Citrix Technical Support, and...
Exploit for CVE-2020-1472
CVE-2020-1472 is a vulnerability in the Windows Netlogon service that allows an attacker to authenticate as the computer account password. The vulnerability is a buffer overflow in the Netlogon service, which can be exploited by sending a specially crafted request to the service. The exploit code...
