dacledit.py

Edit the DACL of an AD object (grant yourself rights).

An impacket tool to edit the DACL of an AD object. After taking ownership (WriteOwner), it grants rights such as WriteMembers or GenericAll over the object to continue the abuse chain.

Family AD abuse (ACL, ADCS, coercion)

Flags -action write -rights WriteMembers

Concepts WriteDACL, ACL Abuse (DACL)

Cheatsheet ACL / DACL abuse

Installation

# All of Impacket's *.py tools ship in the same package:
pipx install impacket
# invoke them as impacket-<tool> or <Tool>.py depending on the packaging

Repositorygithub.com/fortra/impacket

Useful commands3 commands

Appears in

Some machines where its use is documented; not an exhaustive list.

CertifiedHackTheBox