L'attaque par Resource-based Constrained Delegation (RBCD) est une technique bien connue des pentesters et des attaquants. En modifiant l'attribut msDS-AllowedToActOnBehalfOfOtherIdentity d'un compte machine, un attaquant peut usurper l'identité d'utilisateurs sur ladite machine.
Exploiter la RBCD en environnements cross-domain & cross-forest
About this summary. This is a short, independently written summary of an article first published by Synacktiv. Cyber Security News did not report or verify the underlying story. Read the original: https://www.synacktiv.com/publications/exploiter-la-rbcd-en-environnements-cross-domain-cross-forest.html
Source attribution: headline and facts are from Synacktiv (synacktiv.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Posted by Roman Fiedler on Sep 20 Well, splitting the kernel in per module packages may have other advantages, e.g. less data transferred due to using selected small…
rsyslog: mmpstrucdata denial of service fixed in 8.2606.0
Posted by Rainer Gerhards on Sep 20 Hello, We are publishing a GitHub Security Advisory for a denial-of-service vulnerability in the rsyslog mmpstrucdata module…
U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog. The U.S.
Week in review: Cisco patches exploited email gateway 0-day, Revolut breach
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: What we know about the Revolut data breach so far Someone impersonating…
Re: Suricata 8.0.7 released with 67 vulnerabilities fixed
Posted by Sam James on Sep 19 Victor Julien writes: Hi Victor, Please do if you can! It would be much appreciated.
Security Affairs newsletter Round 595 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new…