Diving into pre-created computer accounts

I was on an engagement where I simply could not elevate privileges, so I had to become creative and look deep into my old bucket (bucket being my head) of knowledge, and this resulted in some fun stuff. I had found that the client had a vulnerable certificate template also known as ESC1 that allowed...

The post Diving into pre-created computer accounts appeared first on TrustedSec.

accounts computer penetration testing red team adversarial attack simulation security testing & analysis