Sploitus

Exploit for CVE-2021-42278 CVE-2021-42278 CVE-2021-42287

gitee · 2024-03-05

Exploit Code

MARKDOWN15 lines
## https://sploitus.com/exploit?id=24A77589-31E9-5545-A7A7-0621F9EE7DCD
This is a PoC exploit for CVE-2021-42278 and CVE-2021-42287, which are two vulnerabilities in the Windows operating system that allow an attacker to impersonate a Domain Administrator (DA) from a standard domain user. The exploit uses the Impacket library to interact with the Windows Domain Controller and perform the impersonation.

The exploit is designed to work in two modes: share mode and server mode. In share mode, the exploit uses a shared folder on the target machine to execute commands and receive output. In server mode, the exploit launches a local SMB server to receive the output of commands executed on the target machine.

The exploit requires the following dependencies:

Impacket library
SMBConnection library
SMBServer library

The exploit uses the following techniques to impersonate a DA:

S4U2Self: This is a technique used to request a service ticket for a user on behalf of another user. The exploit uses this technique to request a service ticket for the DA user on behalf of the standard domain user.
S4U2Proxy: This is a technique used to request a service ticket for a user on behalf of another user, but with the ability to impersonate the user. The exploit uses this technique to impersonate the DA user