POC-CVE-2026-54121-Certighost

CertiGhost CVE-2026-54121 - AD CS Chase Fallback 익스플로잇 툴킷 개요 CertiGhost는 Active Directory 인증서 서비스AD CS의 심각한 취약점CVSS 8.8으로, 낮은 권한의 도메인 사용자가 도메인 컨트롤러를 가장하여 전체 도메인을 장악할 수 있게 해줍니다. CVE: CVE-2026-54121 CVSS: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 패치 적용: 2026년 7월 14일 Microsoft 보안 업데이트 PoC 공개: 2026년 7월...

The Fake Domain Controller You Didn’t See Coming: Detecting DCShadow Attacks Using Trellix NDR

The Fake Domain Controller You Didn’t See Coming: Detecting DCShadow Attacks Using Trellix NDR By Maulik Maheta and Chao Sun · December 17, 2025 Executive summary DCShadow is a covert post-exploitation technique that enables an attacker to impersonate a domain controller and make unauthorized,...

samba: Netlogon elevation of privilege vulnerability (Zerologon)

A flaw was found in the Microsoft Windows Netlogon Remote Protocol MS-NRPC, where it reuses a known, static, zero-value initialization vector IV in AES-CFB8 mode. This flaw allows an unauthenticated attacker to impersonate a domain-joined computer, including a domain controller, and possibly obta...