RiskySPNs is a collection of PowerShell scripts focused on detecting and abusing accounts associated with SPNs (Service Principal Name). This module can assist blue teams to identify potentially risky SPNs as well as red teams to escalate privileges by leveraging Kerberos and Active Directory.
https://github.com/cyberark/RiskySPN
https://www.cyberark.com/blog/service-accounts-weakest-link-chain/
https://www.kitploit.com/2018/06/riskyspn-detect-and-abuse-risky-spns.html
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.