Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
New critical flaw allows low-privileged users to compromise entire domain environments via certificate forgery.
Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine. They codenamed the flaw Certighost. Because Domain Controller accounts carry d...
The Hacker News
Source
Generated insight by OnAirToday AI
Certighost highlights a critical vulnerability in the integration of AD Certificate Services, proving that low-privileged entities can escalate to domain-wide control through authentication spoofing. This exploit underscores the urgent need for stricter identity governance and the hardening of PKI implementations to prevent lateral movement.
Comments
Keep comments relevant and respectful. No links, advertising, self-promotion, or spam.