HADESS
Cyber Security Magic
Latest Articles Case Study Skills & Certifications Career Guide White Paper Search Products & Services Talk to an Expert
Back to Magazine
Case Study

Pwning the Domain: DACL Abuse EBook

Share

The analysis of permissions within a Windows domain revealed critical security risks. Misconfigurations such as granting GenericAll or GenericWrite permissions on group and user objects can lead to unauthorized access. Additionally, the exploitation of ForceChangePassword misconfiguration allows attackers to reset user passwords without proper authentication. Proper permission management and regular audits are essential to prevent misuse of these permissions.

Put this research to work on your environment

The team behind this article runs attack surface management, SAST, red team operations and vulnerability research for organizations that need answers, not checklists.

ASM · SAST · Red Team · Vulnerability Research · Career

hadess
Written by
hadess
View all articles

Get This as a Free PDF

Download this Case Study article as a PDF — free, no strings attached.

Know your exposure before attackers do.

Attack surface management, SAST, red team operations and vulnerability research — from the team behind HADESS research.

Explore Products & Services