Active Directory Privilege Escalation via Critical CVE Exploitation and Misconfiguration
Kerberos PAC Validation Bypass (CVE-2014-6324)
This vulnerability exploits improper validation of the Privilege Attribute Certificate (PAC) during Kerberos ticket-granting requests. Successful execution requires valid credentials for a standard domain account combined with local administrative privileges on any domain-joined workstation. The at ...
Posted on Sun, 06 Sep 2026 16:51:49 +0000 by douceur
Automating Active Directory User Provisioning with PowerShell ADSI
Automating directory provisioning requires binding to the target container before instantiating new objects. PowerShell’s [ADSI] type accelerator provides direct access to LDAP paths, enabling programmatic manipulation of Active Directory entries without legacy console utilities.
The process initiates by establishing a connection to the organiz ...
Posted on Sun, 02 Aug 2026 16:15:42 +0000 by mitwess