Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Home / Tech / Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

July 24, 2026 dirk 0 Comments 3 tags

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine.

They codenamed the flaw Certighost. Because Domain Controller accounts carry directory replication rights, the resulting Kerberos credential can retrieve the krbtgt secret through DCSync.

Source: The Hacker News

Explore More

Why Post-Quantum Cryptography Starts With Credentials

Why Post-Quantum Cryptography Starts With Credentials Today’s encrypted data, such as credentials, may no longer remain confidential in the future because the public-key cryptography protecting it will soon be broken

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT)

How much of HN is AI?

How much of HN is AI? Source: Hacker News