😈 [ Fabian @testert01 ]
Unconstrained Delegation on a gMSA and Webclient / NTLMv1 active on servers that can retrieve the credentials of a gMSA with unconstrained delegation can lead to a complete domain compromise from domain users.
@micahvandeusen, @_dirkjan, nice tools :)
🔗 https://nothingspecialforu.github.io/UCgMSAExploitation/
🐥 [ tweet ]
Post #2971
5.73K
- 👍 6