bloodyAD
Abuses AD ACLs from Linux (set password, SPN, RBCD).
A tool to abuse Active Directory from Linux. It exploits misconfigured permissions (ACLs) to change passwords, add SPNs, write shadow credentials or set up RBCD, all with a regular user's credentials.
Family AD abuse (ACL, ADCS, coercion)
Flags set password / set object / add
Concepts ACL Abuse (DACL), ForceChangePassword, RBCD (Resource-Based Constrained Delegation)
Cheatsheet ACL / DACL abuse
Installation
pipx install bloodyADUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- HokkaidoProving Grounds Practice