Misconfigurations in most Active Directory environments create serious security holes

guest · Jun 24, 2021

Misconfigurations in most Active Directory environments create serious security holes, researchers find
One default configuration deemed problematic failed meet Microsoft’s ‘bar for a security update’
June 23, 2021
https://portswigger.net/daily-swig/...reate-serious-security-holes-researchers-find

Common misconfigurations in Active Directory Certificate Services can allow attackers to steal credentials, escalate privileges, and achieve domain persistence, security researchers have found.

“In our experience, almost every Active Directory installation we’ve looked at over the last decade has had some kind of misconfiguration issue,” said Lee Christensen and Will Schroeder, Technical Architects at SpecterOps.

The researchers have detailed their findings in a comprehensive white paper (PDF) and a blog post, and will present them at this year’s Black Hat USA security conference.
Click to expand...

Credential theft, domain persistence, and beyond
In their white paper, Schroeder and Christensen lay out several ways misconfigurations in AD CS can be abused for malicious purposes in three areas:

• Credential theft by maliciously enrolling users and computers in certificates, and stealing existing certificates. According to the researchers, the credential theft scheme survives password changes and can bypass smart card authentication
• Privilege escalation methods that allow attackers to become any user in the domain
• Domain persistence attacks that allow attackers to log on as any Active Directory user
Click to expand...

“These areas of research are not new, and no new vulnerability has been discovered, but no one has looked at all these AD CS issues holistically,” the researchers said. “Also, no one has covered offensive weaponization of these attacks, nor how to detect or defend against these issues.”
Click to expand...

Certified Pre-Owned - Abusing Active Directory Certificate Services
(PDF): https://www.specterops.io/assets/resources/Certified_Pre-Owned.pdf

Log in or Sign up

Misconfigurations in most Active Directory environments create serious security holes

guest Guest

Log in or Sign up

Misconfigurations in most Active Directory environments create serious security holes

guest Guest

Useful Searches