Tag: Privilege Escalation

All the articles with the tag "Privilege Escalation".

• Active Directory Certificate Services: Abusing ADCS ESC8 (Kerberos Relay)

  30 Jun, 2026

  Deep dive into exploiting ADCS ESC8 via Kerberos Relay using KrbRelay to obtain domain controller certificates and achieve domain takeover.

• Active Directory Certificate Services: Abusing ADCS ESC11 (RPC Relay)

  28 Jun, 2026

  Exploitation of ADCS ESC11 through unencrypted RPC ICertPassage interfaces via NTLM relaying to compromise Active Directory environments.

• Active Directory Certificate Services: Abusing ADCS ESC8 (NTLM Relay)

  9 Jun, 2026

  Step-by-step walkthrough of ADCS ESC8 exploitation over HTTP Web Enrollment using NTLM Relay for full Active Directory domain escalation.

• Active Directory Domain Trust: Abusing Child-to-Parent Trust

  8 Jun, 2026

  Privilege escalation across Active Directory trust boundaries: abusing Child-to-Parent trusts within the same forest to compromise the root domain.