Back to directory
WRITEUP #883

Site Takeover via SCCM’s AdminService API

OtherNTLMSCCM site takeover
by@garrfoster(Garrett Foster)
Program
-
Published
Aug 10, 2023
Added to HackDex
Aug 21, 2023
Read Full Writeuphttps://posts.specterops.io/site-takeover-via-sccms-adminservice-api-d932e22b2bf
▸ RELATED WRITEUPS
Drop the Mic (CVE-2019-1166)
OtherNTLM
Data Theft in Salesforce: Manipulating Public Links
OtherSOQL injection
When Certificates Fail: A Story of Bypassed MFA in Remote Access
Other2FA / MFA bypass
SSTI in Bug Bounty Program: The Time I Played with Handlebars and Broke Stuff
OtherSSTI
Ghost In The Ppl Part 1: Byovdll
OtherUse-After-Free

Built with ❤️ by Shubham Rawat