Published inPosts By SpecterOps Team MembersADCS Attack Paths in BloodHound — Part 3In this blog post, we will explore the new ESC6/ESC9/ESC10 edges we have introduced with ADCS support in BloodHound.Sep 11, 2024Sep 11, 2024
Published inPosts By SpecterOps Team MembersADCS Attack Paths in BloodHound — Part 2In this blog post, we will cover how we have incorporated the Golden Certificates and the ADCS ESC3 abuse technique in BloodHound.May 1, 2024May 1, 2024
Published inPosts By SpecterOps Team MembersPwned by the Mail CarrierHow MS Exchange on-premises compromises Active Directory and what organizations can do to prevent thatMar 20, 20243Mar 20, 20243
Published inPosts By SpecterOps Team MembersADCS ESC14 Abuse TechniqueThe altSecurityIdentities attribute of Active Directory (AD) computers and users allows you to specify explicit certificate mappings. An…Feb 28, 20241Feb 28, 20241
Published inPosts By SpecterOps Team MembersADCS ESC13 Abuse TechniqueIt is possible to configure an Active Directory Certificate Services (ADCS) certificate template with an issuance policy having an OID…Feb 14, 2024Feb 14, 2024
Published inPosts By SpecterOps Team MembersADCS Attack Paths in BloodHound — Part 1Since Will Schroeder and Lee Christensen published the Certified Pre-Owned whitepaper, the BloodHound Enterprise team at SpecterOps has…Jan 24, 2024Jan 24, 2024
Published inPosts By SpecterOps Team MembersWhat is Tier Zero — Part 2Round 2!Sep 14, 20231Sep 14, 20231
Published inPosts By SpecterOps Team MembersWhat is Tier Zero — Part 1Tier Zero is a crucial group of assets in Active Directory (AD) and Azure. Its purpose is to protect the most critical components by…Jun 22, 2023Jun 22, 2023
Published inPosts By SpecterOps Team MembersFOSS BloodHound 4.3.1 releaseWe are excited to share the release of BloodHound version 4.3.1. We have accepted a lot of pull requests made by BloodHound users for bug…May 23, 20231May 23, 20231
Published inPosts By SpecterOps Team MembersEstablish security boundaries in your on-prem AD and Azure environmentPreventing escalation from initial access in your Active Directory (AD) environment to Domain Admins can feel impossible, especially after…Jun 20, 2022Jun 20, 2022
