When PetitPotam is exploited and NTLM credentials are relayed to Active Directory Certificate Services, an attacker can obtain Domain Administrator privileges without any prior authentication to the domain.
- THIS PROOF OF CONCEPT IS FOR EDUCATIONAL/AWARENESS/RESEARCH PURPOSES ONLY -
Read the full blogpost here:
[ Ссылка ]
By Ben Bidmead @TruesecPlay
![](https://s2.save4k.ru/pic/wJXTg4mK_dI/maxresdefault.jpg)