Active Directory Privilege Escalation via Critical CVE Exploitation and Misconfiguration
Kerberos PAC Validation Bypass (CVE-2014-6324)
This vulnerability exploits improper validation of the Privilege Attribute Certificate (PAC) during Kerberos ticket-granting requests. Successful execution requires valid credentials for a standard domain account combined with local administrative privileges on any domain-joined workstation. The at ...
Posted on Sun, 06 Sep 2026 16:51:49 +0000 by douceur
Understanding NTLM Relay and Kerberos Ticket Exploitation in Active Directory Environments
NTLM Hash Relaying
In modern Windows domains, direct plaintext credential extraction is increasingly difficult due to mitigations like KB2871997 and the default disabling of WDigest caching. How ever, attackers can bypas password cracking entirely by reusing captured NTLM authentication hashes—without ever needing to decrypt them. This techniqu ...
Posted on Thu, 07 May 2026 23:10:01 +0000 by computerzworld