学习已公开的域渗透攻击手法 - Githubissues

s3cst4rs / Study_Notes

内网渗透、工具开发、二进制等相关笔记

MIT License

12 stars 0 forks source link

学习已公开的域渗透攻击手法 #2

Closed s3cst4rs closed 9 months ago

s3cst4rs commented 1 year ago

先将实际利用方法了解、复现

暂时先参考以下内容 https://adsecurity.org/ https://www.ired.team/ https://www.thehacker.recipes/ https://book.hacktricks.xyz/welcome/readme https://github.com/GhostPack

s3cst4rs commented 1 year ago

[x] ADCS 相关漏洞复现
[x] CVE-2021-42278/CVE-2021-42287

s3cst4rs commented 1 year ago

待测，最基本的测试，需要 KDC 与 ADCS 不在同一机器上才可以

[ ] https://dirkjanm.io/relaying-kerberos-over-dns-with-krbrelayx-and-mitm6/