Domain Privilege Escalation Archives

Domain Escalation, Privilege Escalation, Red Teaming

Windows Privilege Escalation: Server Operator Group

In this blog, we dive into a Server Operator exploit scenario for Windows Privilege Escalation, leveraging the commonly overlooked but powerful Server Operator group in

Domain Escalation, Privilege Escalation, Red Teaming

Domain Escalation: Unconstrained Delegation

Post-Windows 2000, Microsoft introduced an option where users could authenticate to one system via Kerberos and work with another system. The delegation option makes this

Domain Escalation, Privilege Escalation, Red Teaming

Domain Escalation: Resource Based Constrained Delegation

Resource-Based Constrained Delegation (RBCD) is a security feature in Active Directory (AD) that allows a computer object to specify which users or machines can impersonate

Domain Escalation, Privilege Escalation, Red Teaming

Domain Escalation: PetitPotam NTLM Relay to ADCS Endpoints

Will Schroeder and Lee Christensen wrote a research paper on this technique which can be referred to here. In ESC8 technique mentioned in the research paper,

Domain Escalation, Privilege Escalation

Windows Privilege Escalation: DnsAdmins to DomainAdmin

In this article, we will show how attackers can escalate privileges from DNSAdmins to Domain Admin in Windows environments and gain unauthorized access. We will

Hacking Articles

Tag: Domain Privilege Escalation

Windows Privilege Escalation: Server Operator Group

Domain Escalation: Unconstrained Delegation

Domain Escalation: Resource Based Constrained Delegation

Domain Escalation: PetitPotam NTLM Relay to ADCS Endpoints

Windows Privilege Escalation: DnsAdmins to DomainAdmin