AD attackers often hunt for hosts with Unconstrained Delegation enabled.
Use these scripts to create Ghost-Servers advertising Unconstrained Delegation (but alerting you to it's usage).
https://blog.thinkst.com/2025/02/almost-famous-behind-the-scenes-of-a-feature-that-didnt-make-the-cut.html
__
* Also featuring "why we aren't shipping this in Canary"
Use these scripts to create Ghost-Servers advertising Unconstrained Delegation (but alerting you to it's usage).
https://blog.thinkst.com/2025/02/almost-famous-behind-the-scenes-of-a-feature-that-didnt-make-the-cut.html
__
* Also featuring "why we aren't shipping this in Canary"
Comments