#ad-cs
-
Certighost: An Ordinary AD User Can Impersonate a Domain Controller
Researchers have published a working exploit for AD CS that lets an ordinary account obtain a domain controller certificate and, via DCSync, reach the krbtgt secret. Microsoft closed the vulnerability with its July 14 update.