https://wearethebug.dev/tags/seenabledelegationprivilege/Recent content on WE ARE THE BUGTradecraften-usFri, 06 Oct 2023 00:00:00 +0000https://wearethebug.dev/posts/vl-delegate/Fri, 06 Oct 2023 00:00:00 +0000https://wearethebug.dev/posts/vl-delegate/Delegate is a medium-rated Windows machine that involves Active Directory attacks. The machine has the guest account enabled, allowing the attacker to read files that contain hard-coded credentials. The credentials allow us to WriteProperty of a user account that is allowed to have WinRM sessions on the Domain Controller. The compromised user has the SeEnableDelegationPrivilege privilege assigned, which allows us to modify the TRUSTED_FOR_DELEGATION flag for AD objects, enabling us to perform Unconstrained Delegation.