VulnCicada 677
RETIRED MACHINE
Windows
Medium
VulnCicada
Windows
Medium
3.9
MACHINE RATING108
USER OWNS110
SYSTEM OWNS03/07/2025
RELEASEDMachine Synopsis
VulnCicada is a Medium Windows Active Directory machine that involves discovering a password inside an image on a public share. With that password an attacker is able to discover that the machine is vulnerable to ESC8 and can use Kerberos relaying to bypass self-relay restrictions in order to get a certificate as the machine account itself. With this new certificate, we are able to dump the hashes of the `Administrator` user and thus compromise the whole domain.
Machine Matrix
