New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

When checking file share paths for weak permissions, check if the host even exists. #105

Closed

l0ss opened this issue Nov 12, 2019 · 0 comments

Owner

l0ss commented Nov 12, 2019

If the host doesn't exist
and we can join new computers to the domain
or
there's no record in AD DNS
and DNS dynamic updates are enabled

We can redirect the GPO to attacker-controlled code!

tl;dr implement checks for the above.

l0ss closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment