Exploiting AD CS - ESC16 Step by Step.

Tue, 01 Apr 2025 00:00:00 +0000

A few days ago, I was working through a HackTheBox machine called Fluffy and came across a very curious configuration in the Active Directory environment. Everything pointed to the new ESC16 — and yes, we leveraged it to grab that coveted “Domain Admin” (I was a bit uncomfortable since I’m still a noob when it comes to Active Directory).

So I decided to write this post to dive deeper into the topic and understand why all of this happens and why AD CS behaves in a way that practically hands us Domain Admin.

About

Mon, 01 Jan 0001 00:00:00 +0000

Español

In this blog you’ll basically find articles about things I learn along the way.

I do this to reinforce my own memory and in case it can be useful to someone else.

Mil4ne

Exploiting AD CS - ESC16 Step by Step.

About

Links