Active Directory → ACL, Delegation & GPO
ACL misconfigurations are the silent privilege escalation path most AD assessments miss without BloodHound. GenericAll, WriteDACL,…
Write access to a GPO linked to Domain Computers OU is code execution on every workstation. Write access to a Domain Controllers O…
Kerberos delegation lets services authenticate to other services on behalf of users. Unconstrained delegation captures TGTs from a…
AD's permission model controls who can do what to every object. ACE misconfigurations are behind most unintended privilege escalat…
AdminSDHolder is an AD object that acts as a template for the ACLs of all protected accounts. SDProp runs every 60 minutes and ove…