David Kennedy
LightNews LightNews
banner
cyb3rc3lt.bsky.social
David Kennedy
@cyb3rc3lt.bsky.social
65 followers 73 following 2 posts
Father, husband, hacker, Irish
redteaming.org
Posts Replies Media Videos
Pinned
cyb3rc3lt.bsky.social
David Kennedy @cyb3rc3lt.bsky.social · Nov 15
Great article on ESC15 especially after you realise PKInit won't work to auth but there is a workaround supplied too.

medium.com/@offsecdeer/...
ADCS Exploitation Series — Part 2: Certificate Mapping + ESC15
Certificate mapping is the process at the heart of multiple ADCS vulnerabilities, so I thought it would be appropriate to dedicate it its…
medium.com
cyb3rc3lt.bsky.social
Looks like linpeas.sh is no more after that code extracting user data was spotted.
November 29, 2024 at 7:24 AM
cyb3rc3lt.bsky.social
Great article on ESC15 especially after you realise PKInit won't work to auth but there is a workaround supplied too.

medium.com/@offsecdeer/...
ADCS Exploitation Series — Part 2: Certificate Mapping + ESC15
Certificate mapping is the process at the heart of multiple ADCS vulnerabilities, so I thought it would be appropriate to dedicate it its…
medium.com
November 15, 2024 at 7:58 AM