## https://sploitus.com/exploit?id=24A77589-31E9-5545-A7A7-0621F9EE7DCD
This is a PoC exploit for CVE-2021-42278 and CVE-2021-42287, which are two vulnerabilities in the Windows operating system that allow an attacker to impersonate a Domain Administrator (DA) from a standard domain user. The exploit uses the Impacket library to interact with the Windows Domain Controller and perform the impersonation.
The exploit is designed to work in two modes: share mode and server mode. In share mode, the exploit uses a shared folder on the target machine to execute commands and receive output. In server mode, the exploit launches a local SMB server to receive the output of commands executed on the target machine.
The exploit requires the following dependencies:
Impacket library
SMBConnection library
SMBServer library
The exploit uses the following techniques to impersonate a DA:
S4U2Self: This is a technique used to request a service ticket for a user on behalf of another user. The exploit uses this technique to request a service ticket for the DA user on behalf of the standard domain user.
S4U2Proxy: This is a technique used to request a service ticket for a user on behalf of another user, but with the ability to impersonate the user. The exploit uses this technique to impersonate the DA user