owneredit.py

WriteOwner: change the owner of an AD object (impacket).

An impacket tool for the WriteOwner abuse: it changes the owner of an AD object. Becoming the owner of a group or user then lets you edit its DACL and grant yourself full control.

Family AD abuse (ACL, ADCS, coercion)

Flags -action write -new-owner

Concepts WriteOwner, ACL Abuse (DACL)

Cheatsheet ACL / DACL abuse

Installation

# All of Impacket's *.py tools ship in the same package:
pipx install impacket
# invoke them as impacket-<tool> or <Tool>.py depending on the packaging

Repositorygithub.com/fortra/impacket

Useful commands2 commands

Appears in

Some machines where its use is documented; not an exhaustive list.

CertifiedHackTheBox