動作
專案資訊 #1067
進行中專案資訊 #1064: 2025-PenTest
Dangerous Permission over Accounts with Replication Rights
開始日期:
2025-08-01
完成日期:
2025-12-31 (逾期 25 天)
完成百分比:
0%
預估工時:
概述
NN bookmark20250528021100422251172311 "Dangerous Permission over Accounts with Replication Rights
All domain users have ForceChangePassword permission against three accounts which have DCsync ability.
" "All standard domain users can change passwords of high privileged users who have Replication rights. DCsync attack is thus possible for adversary to achieve domain dominance.
" Revoke Replication, ForceChangePassword rights from non-essential accounts, including both user and service accounts, unless absolutely required
動作