search
githubEdit

DACL Abused Permissions

hashtag
1) Owns object

  • WriteDacl

hashtag
2) GenericAll

  • GenericWrite

  • AllExtendedRights

  • WriteOwner

hashtag
3) GenericWrite

  • Self

  • WriteProperty

hashtag
4) AllExtendedRights

  • User-Force-Change-Password

  • DS-Replication-Get-Changes

  • DS-Replication-Get-Changes-All

  • DS-Replication-Get-Changes-In-Filtered-Set

PreviousComputerNextDACL Attacks on the domain/forest

Last updated