AD CS relay attack - practical guide
Tags
attack-pattern: Dcsync - T1003.006 Server - T1583.004 Server - T1584.004 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID bd1fb664-b046-494b-8aef-436f865893d9
Fingerprint 1f6a4858a84a6e58
Analysis status DONE
Considered CTI value 0
Text language
Published June 23, 2021, midnight
Added to db Jan. 18, 2023, 11:11 p.m.
Last updated Nov. 17, 2024, 12:58 p.m.
Headline AD CS relay attack - practical guide
Title AD CS relay attack - practical guide
Detected Hints/Tags/Attributes 22/1/6
Source URLs
Redirection Url
Details Source https://www.exandroid.dev/2021/06/23/ad-cs-relay-attack-practical-guide/
URL Provider
Details Provider Source level domain
Details exandroid.dev www.exandroid.dev
Attributes
Details Type #Events CTI Value
Details Domain 23 
ntlmrelayx.py
Details Domain 3 
dementor.py
Details File 22 
ntlmrelayx.py
Details File 4 
certfnsh.asp
Details File 3 
dementor.py
Details File 29 
rubeus.exe