Abusing Microsoft Exchange for privilege escalation: any user may obtain Domain Admin privileges

The security expert Dirk-jan Mollema discovered a privilege escalation vulnerability in Microsoft Exchange that could be exploited by a user to become a Domain Admin.

Continue reading “Abusing Microsoft Exchange for privilege escalation: any user may obtain Domain Admin privileges”

Fun with network protocols, using Python and Impacket

Impacket is a collection of Python classes, developed by Core Security, for working with network protocols, which provides a low-level programmatic access to the packets and, for some protocols such us SMB1-3 and MSRPC, the protocol implementation itself.

Continue reading “Fun with network protocols, using Python and Impacket”