AI & Machine Learning
Abusing Shadow Credentials For Privesc
The skill enables an attacker to overwrite an AD account’s msDS-KeyCredentialLink attribute with a malicious public key, allowing PKINIT authentication and extraction of the target’s NT hash without a password reset. It is employed when BloodHound identifies GenericWrite, GenericAll, or AddKeyCredentialLink permissions on a target, providing a covert alternative to ForceChangePassword during authorized red‑team operations. This technique benefits penetration testers and security teams seeking to validate privilege escalation pathways in a controlled environment.
- Publisher / source
- Cybersecurity Skills (Community)
- Upstream record
- mukul975/Anthropic-Cybersecurity-Skills
- Version
- Version 3
- Published
- Publication review
- Approved for publication
- Content fingerprint
83ba5fe08baefaa148c0e1bee845197760729712967ff54ab2eb280ab277dad8