{"vulnerability": "cve-2021-42282", "sightings": [{"uuid": "b08128a2-2a43-4a72-9018-c5318370a30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42282", "type": "seen", "source": "https://t.me/arpsyndicate/1198", "content": "#ExploitObserverAlert\n\nCVE-2021-42287\n\nDESCRIPTION: Exploit Observer has 108 entries related to CVE-2021-42287. Active Directory Domain Services Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42278, CVE-2021-42282, CVE-2021-42291.\n\nFIRST-EPSS: 0.928080000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-04T12:00:54.000000Z"}, {"uuid": "b097a491-47f8-4474-9926-e1629bc4a67e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42282", "type": "seen", "source": "https://t.me/arpsyndicate/231", "content": "#ExploitObserverAlert\n\nCVE-2021-42287\n\nDESCRIPTION: Exploit Observer has 104 entries related to CVE-2021-42287. Active Directory Domain Services Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42278, CVE-2021-42282, CVE-2021-42291.\n\nFIRST-EPSS: 0.926130000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-11-17T07:24:39.000000Z"}, {"uuid": "0c0acf8a-5100-4bc9-8af7-d8f511b27bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42282", "type": "seen", "source": "https://t.me/arpsyndicate/1557", "content": "#ExploitObserverAlert\n\nCVE-2021-42287\n\nDESCRIPTION: Exploit Observer has 107 entries related to CVE-2021-42287. Active Directory Domain Services Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42278, CVE-2021-42282, CVE-2021-42291.\n\nFIRST-EPSS: 0.924660000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-08T12:18:23.000000Z"}, {"uuid": "38c5ba5f-f970-4ecb-8195-99355fc04101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42282", "type": "published-proof-of-concept", "source": "Telegram/4OwSIIHM4Phzi6L1Q-57NlPfvr_pP-K8ZqCBqbr0RdiVmEc", "content": "", "creation_timestamp": "2025-04-29T17:00:10.000000Z"}, {"uuid": "42d2275c-0494-4dd7-969b-2a94516f1953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42282", "type": "published-proof-of-concept", "source": "Telegram/XQnuNd5X8XmOjKF9F0Yu3FlXocPy2dUR7xXCx3NP2hXIbzk", "content": "", "creation_timestamp": "2025-04-26T23:00:05.000000Z"}, {"uuid": "9fb76b01-deba-45f4-943b-50ebbb085f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42282", "type": "seen", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-16T19:00:19.882821Z"}, {"uuid": "ea8699d0-ca65-4675-b3c6-27e285e85ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42282", "type": "seen", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-17T00:00:36.248269Z"}, {"uuid": "38c11234-c8fc-423e-8b1d-f7c3b0570d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42282", "type": "published-proof-of-concept", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-18T00:00:24.180313Z"}, {"uuid": "d9a05727-dbb6-4ff7-8fb3-48e9bbded4de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42282", "type": "seen", "source": "https://t.me/hacking_Attack/38156", "content": "Hacking Articles|Raj Chandel's Blog\nActive Directory Privilege Escalation (CVE-2021\u201342278)\n\nThis post discusses about how CVE-2021-42287 allows potential attackers to gain high privileged user access (domain controllers Administrator level access) via a low privileged user (any normal Domain user) Description:Active Directory Domain Services Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42278, CVE-2021-42282, CVE-2021-42291.Release Date:Nov 9, 2021Impact:Elevation of PrivilegeSeverity:ImportantCVSS score:8.8Pentest Lab setupIn the lab, we'll use a Kali VM as the attacker machine and a Windows domain controller (affected Windows platforms are listed above in the article) that hasn't been patched since November 9, 2021, as the victim/target machine.net user sakshihttps://blogger.googleusercontent.com/img/a/AVvXsEjimJpxnvI0YnvCZvfez16f-y3jqhrFe_fEfNn3MoLodMxxYdsU119qQjwF-ibUB0Epq4mL6EjoE2_3819nG26bAxTK2lha2N8gXL8iL56VVTsbEzzjB_zyIV6ATLLsJsrbEnsljEq3-GPmvjwz5v9zdN0t63LFo1OwfG1hdaSZksYKqjD5DILbM6d7ug=s16000 ExploitNow on your attacker system, which is Kali VM, you have to clone the exploit from the git repository provided below.git clone https://github.com/Ridter/noPac After cloning the repo https://github.com/Ridter/noPac, navigate to the noPac foldercd noPachttps://blogger.googleusercontent.com/img/a/AVvXsEgWBhW8jZIbBB_rHqPUzSNMphKReY58NktDe5W8Wfj-HdTmJNpuqWonnTDWomDMhttz6SsQmvbj_BI4TOgseYCt8-50EpJR_Hys0oaaosTiCL8PTDyJxVOuDBATjKwdvrvDdfuD12Yp7qHQDYAiXLfJ9AGnuYgEJ5v9HmQ8TiEagTBSTrWYpziH8m7owQ=s16000 And then execute the command python3 noPac.py ignite.local/sakshi:'Password@1' -dc-ip 192.168.1.182 -shell --impersonate administrator -use-ldapThis CVE is a security bypass vulnerability that is caused by Kerberos\u2019s PAC confusion and impersonation of domain controllers. altSecurityIdentitiesattribute of an account in a foreign domain to Kerberos:[samaccountname]@[domain]to impersonate that user.MitigationKB5008602 - https://support.microsoft.com/en-us/topic/november-14-2021-kb5008602-os-build-17763-2305-out-of-band-8583a8a3-ebed-4829-b285-356fb5aaacd7___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:59.953692Z"}, {"uuid": "7dec0330-48d0-4ed8-b73e-7d6715b00850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42282", "type": "seen", "source": "https://t.me/hacking_Attack/38156", "content": "Hacking Articles|Raj Chandel's Blog\nActive Directory Privilege Escalation (CVE-2021\u201342278)\n\nThis post discusses about how CVE-2021-42287 allows potential attackers to gain high privileged user access (domain controllers Administrator level access) via a low privileged user (any normal Domain user) Description:Active Directory Domain Services Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42278, CVE-2021-42282, CVE-2021-42291.Release Date:Nov 9, 2021Impact:Elevation of PrivilegeSeverity:ImportantCVSS score:8.8Pentest Lab setupIn the lab, we'll use a Kali VM as the attacker machine and a Windows domain controller (affected Windows platforms are listed above in the article) that hasn't been patched since November 9, 2021, as the victim/target machine.net user sakshihttps://blogger.googleusercontent.com/img/a/AVvXsEjimJpxnvI0YnvCZvfez16f-y3jqhrFe_fEfNn3MoLodMxxYdsU119qQjwF-ibUB0Epq4mL6EjoE2_3819nG26bAxTK2lha2N8gXL8iL56VVTsbEzzjB_zyIV6ATLLsJsrbEnsljEq3-GPmvjwz5v9zdN0t63LFo1OwfG1hdaSZksYKqjD5DILbM6d7ug=s16000 ExploitNow on your attacker system, which is Kali VM, you have to clone the exploit from the git repository provided below.git clone https://github.com/Ridter/noPac After cloning the repo https://github.com/Ridter/noPac, navigate to the noPac foldercd noPachttps://blogger.googleusercontent.com/img/a/AVvXsEgWBhW8jZIbBB_rHqPUzSNMphKReY58NktDe5W8Wfj-HdTmJNpuqWonnTDWomDMhttz6SsQmvbj_BI4TOgseYCt8-50EpJR_Hys0oaaosTiCL8PTDyJxVOuDBATjKwdvrvDdfuD12Yp7qHQDYAiXLfJ9AGnuYgEJ5v9HmQ8TiEagTBSTrWYpziH8m7owQ=s16000 And then execute the command python3 noPac.py ignite.local/sakshi:'Password@1' -dc-ip 192.168.1.182 -shell --impersonate administrator -use-ldapThis CVE is a security bypass vulnerability that is caused by Kerberos\u2019s PAC confusion and impersonation of domain controllers. altSecurityIdentitiesattribute of an account in a foreign domain to Kerberos:[samaccountname]@[domain]to impersonate that user.MitigationKB5008602 - https://support.microsoft.com/en-us/topic/november-14-2021-kb5008602-os-build-17763-2305-out-of-band-8583a8a3-ebed-4829-b285-356fb5aaacd7___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:22.418348Z"}, {"uuid": "ce4dc67d-597c-4883-9fa4-e89eca61eccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42282", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/38156", "content": "Hacking Articles|Raj Chandel's Blog\nActive Directory Privilege Escalation (CVE-2021\u201342278)\n\nThis post discusses about how CVE-2021-42287 allows potential attackers to gain high privileged user access (domain controllers Administrator level access) via a low privileged user (any normal Domain user) Description:Active Directory Domain Services Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42278, CVE-2021-42282, CVE-2021-42291.Release Date:Nov 9, 2021Impact:Elevation of PrivilegeSeverity:ImportantCVSS score:8.8Pentest Lab setupIn the lab, we'll use a Kali VM as the attacker machine and a Windows domain controller (affected Windows platforms are listed above in the article) that hasn't been patched since November 9, 2021, as the victim/target machine.net user sakshihttps://blogger.googleusercontent.com/img/a/AVvXsEjimJpxnvI0YnvCZvfez16f-y3jqhrFe_fEfNn3MoLodMxxYdsU119qQjwF-ibUB0Epq4mL6EjoE2_3819nG26bAxTK2lha2N8gXL8iL56VVTsbEzzjB_zyIV6ATLLsJsrbEnsljEq3-GPmvjwz5v9zdN0t63LFo1OwfG1hdaSZksYKqjD5DILbM6d7ug=s16000 ExploitNow on your attacker system, which is Kali VM, you have to clone the exploit from the git repository provided below.git clone https://github.com/Ridter/noPac After cloning the repo https://github.com/Ridter/noPac, navigate to the noPac foldercd noPachttps://blogger.googleusercontent.com/img/a/AVvXsEgWBhW8jZIbBB_rHqPUzSNMphKReY58NktDe5W8Wfj-HdTmJNpuqWonnTDWomDMhttz6SsQmvbj_BI4TOgseYCt8-50EpJR_Hys0oaaosTiCL8PTDyJxVOuDBATjKwdvrvDdfuD12Yp7qHQDYAiXLfJ9AGnuYgEJ5v9HmQ8TiEagTBSTrWYpziH8m7owQ=s16000 And then execute the command python3 noPac.py ignite.local/sakshi:'Password@1' -dc-ip 192.168.1.182 -shell --impersonate administrator -use-ldapThis CVE is a security bypass vulnerability that is caused by Kerberos\u2019s PAC confusion and impersonation of domain controllers. altSecurityIdentitiesattribute of an account in a foreign domain to Kerberos:[samaccountname]@[domain]to impersonate that user.MitigationKB5008602 - https://support.microsoft.com/en-us/topic/november-14-2021-kb5008602-os-build-17763-2305-out-of-band-8583a8a3-ebed-4829-b285-356fb5aaacd7___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T13:00:04.678068Z"}, {"uuid": "1c827134-78ba-402a-955c-16e31df7919c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42282", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/38156", "content": "Hacking Articles|Raj Chandel's Blog\nActive Directory Privilege Escalation (CVE-2021\u201342278)\n\nThis post discusses about how CVE-2021-42287 allows potential attackers to gain high privileged user access (domain controllers Administrator level access) via a low privileged user (any normal Domain user) Description:Active Directory Domain Services Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42278, CVE-2021-42282, CVE-2021-42291.Release Date:Nov 9, 2021Impact:Elevation of PrivilegeSeverity:ImportantCVSS score:8.8Pentest Lab setupIn the lab, we'll use a Kali VM as the attacker machine and a Windows domain controller (affected Windows platforms are listed above in the article) that hasn't been patched since November 9, 2021, as the victim/target machine.net user sakshihttps://blogger.googleusercontent.com/img/a/AVvXsEjimJpxnvI0YnvCZvfez16f-y3jqhrFe_fEfNn3MoLodMxxYdsU119qQjwF-ibUB0Epq4mL6EjoE2_3819nG26bAxTK2lha2N8gXL8iL56VVTsbEzzjB_zyIV6ATLLsJsrbEnsljEq3-GPmvjwz5v9zdN0t63LFo1OwfG1hdaSZksYKqjD5DILbM6d7ug=s16000 ExploitNow on your attacker system, which is Kali VM, you have to clone the exploit from the git repository provided below.git clone https://github.com/Ridter/noPac After cloning the repo https://github.com/Ridter/noPac, navigate to the noPac foldercd noPachttps://blogger.googleusercontent.com/img/a/AVvXsEgWBhW8jZIbBB_rHqPUzSNMphKReY58NktDe5W8Wfj-HdTmJNpuqWonnTDWomDMhttz6SsQmvbj_BI4TOgseYCt8-50EpJR_Hys0oaaosTiCL8PTDyJxVOuDBATjKwdvrvDdfuD12Yp7qHQDYAiXLfJ9AGnuYgEJ5v9HmQ8TiEagTBSTrWYpziH8m7owQ=s16000 And then execute the command python3 noPac.py ignite.local/sakshi:'Password@1' -dc-ip 192.168.1.182 -shell --impersonate administrator -use-ldapThis CVE is a security bypass vulnerability that is caused by Kerberos\u2019s PAC confusion and impersonation of domain controllers. altSecurityIdentitiesattribute of an account in a foreign domain to Kerberos:[samaccountname]@[domain]to impersonate that user.MitigationKB5008602 - https://support.microsoft.com/en-us/topic/november-14-2021-kb5008602-os-build-17763-2305-out-of-band-8583a8a3-ebed-4829-b285-356fb5aaacd7___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:13.914132Z"}]}