- blog
- 4+ Note
- Focus
- OSCP · Red Team
- Structure
- Recon → Exploit
Rbcd blog
Filters
toolsaddcomputer.py Impacket: Create Computer Account for RBCD
Impacket's addcomputer.py guide for creating Active Directory computer accounts via SAMR or LDAPS, verifying MachineAccountQuota, and using them in RBCD chains.
Discover more Discover more
windowsSeEnableDelegationPrivilege: Privisce AD, S4U and delegation
What is SeEnableDelegationPrivilege, privilege escalation, unconstrained/constrained/RBCD variants, S4U2Self-S4U2Proxy, errors, detection and defense.
Discover more Discover more
windowsRBCD Attack : Resource-Based Constrained Delegation PrivEsc
RBCD leverages write access on msDS-AllowedToActOnBehalfOfOtherIdentity for privilege escalation on active directory. Drive with Impacket, Rubeus and NTLM relay.
Discover more Discover more
windowsSeMachineAccountQuota and RBCD: Privilege a Domain Admin in 5 Commands
From standard domain user to Domain Admin using MachineAccountQuota=10 and RBCD. Create computer account, S4U tickets, DCSync. Red Team AD guidance and privilege escalation.
Discover more Discover more
