CVE-2021-42278 PoC — Active Directory Domain Services Elevation of Privilege Vulnerability

Source

https://github.com/safebuffer/sam-the-admin

Associated Vulnerability

Title:Active Directory Domain Services Elevation of Privilege Vulnerability (CVE-2021-42278)
Description:Active Directory Domain Services Elevation of Privilege Vulnerability

Description

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

Readme

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user 

[![asciicast](https://asciinema.org/a/SnQ66XtmZLzXZQ8QwWwAYs8Dm.svg)](https://asciinema.org/a/SnQ66XtmZLzXZQ8QwWwAYs8Dm)

### Known issues
- it will not work outside kali , i will update it later on :)

#### Check out 
- [CVE-2021-42287/CVE-2021-42278 Weaponisation ](https://exploit.ph/cve-2021-42287-cve-2021-42278-weaponisation.html)
- [sAMAccountName spoofing](https://www.thehacker.recipes/ad/movement/kerberos/samaccountname-spoofing)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!