Our Blog

CertPotato – Using ADCS to privesc from virtual and network service accounts to local system

Reading time: ~14 min
Posted by Hocine Mahtout on 04 November 2022
Categories: Adcs, Kerberos, Rubeus, Windows, Certipy
The goal of this blog post is to present a privilege escalation I found while working on ADCS. We will...

DirectAccess and Kerberos Resource-based Constrained Delegation

Reading time: ~8 min
Posted by Paul van der Haas on 19 August 2020
Categories: Acl, Active directory, Directaccess, Kerberos resource-based constrained delegation, Rubeus
Background Are you tired of working from home due to COVID? While this is quite a unique situation we find...

Chaining multiple techniques and tools for domain takeover using RBCD

Reading time: ~27 min
Posted by Sergio Lazaro on 09 March 2020
Categories: Active directory, Internals, Bloodhound, Dacls, Mimikatz, Powerview, Rubeus
Intro In this blog post I want to show a simulation of a real-world Resource Based Constrained Delegation attack scenario...