Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Active Directory ACL Management: The Importance of Tiered Delegation

semperis.com | vulnerability | #active-directory | #least-privilege | #permissions | #acl-management | #tiered-delegation | #domain-escalation

Summary

Poorly managed AD ACLs enable domain escalation. The post explains a tiered delegation model—Tier 0 domain controllers, Tier 1 servers, Tier 2 user administration—to enforce least privilege.
Published
Collected

original ↗

Related coverage

blog · semperis.com
Simplify Active Directory Permissions Handling with Delegation Manager
Semperis Delegation Manager adds role-based access control atop AD to make permission delegation consistent and auditable—curbing permission creep and speeding attack remediation.
blog · netspi.com
Faster Domain Escalation using LDAP
Shows how to find systems where Domain Admins are likely logged in by querying the ServicePrincipalName attribute over LDAP, with a PowerShell module to automate the process.
vulnerability · semperis.com
Resource-Based Constrained Delegation: AD Security 101
Resource-based constrained delegation (RBCD) lets admins delegate access per resource via msDS-AllowedToActOnBehalfOfOtherIdentity, reducing privilege risk—but misconfiguration can be abused.
vulnerability · bishopfox.com
Escalator to the Cloud: 5 Privesc Attack Vectors in AWS
Gerben Kleijn validated Spencer Gietzen's 21 AWS privilege escalation methods and grouped them into five categories, highlighting misconfigurations admins should watch for in IAM setups.
vulnerability · bishopfox.com
AirDroid: How Much Do Your Apps Know?
Bishop Fox recounts the AirDroid authentication bug that let a malicious link silently hijack Android phones — camera, GPS, SMS, files — even when the app wasn't running.
vulnerability · netspi.com
Preventing SQL Injection at the Database
SQL injection vulnerabilities are common out in the real world.
back