OverviewList cybersecList Category cybersecAI Testing - Cybersecurity - Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine.

They codenamed the flaw Certighost. Because Domain Controller accounts carry directory replication rights, the resulting Kerberos credential can retrieve the krbtgt secret through DCSync.

3:10 pm, July 24, 2026

guid

https://thehackernews.com/2026/07/certighost-exploit-lets-low-privileged.html

source_url

https://thehackernews.com/2026/07/certighost-exploit-lets-low-privileged.html

id: 2217
uid: MtmT8
insdate: 2026-07-24 15:10:05
title: Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
additional: Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine.

They codenamed the flaw Certighost. Because Domain Controller accounts carry directory replication rights, the resulting Kerberos credential can retrieve the krbtgt secret through DCSync.
category: Cybersecurity
md5:
guid: https://thehackernews.com/2026/07/certighost-exploit-lets-low-privileged.html
source_url: https://thehackernews.com/2026/07/certighost-exploit-lets-low-privileged.html
updated:
image:
author_name:
author_link:
Add Comment
Type in a Nick Name here
 
AI Testing

Autonomous AI API, a cutting-edge platform that leverages advanced AI technologies to enable self-modification and self-repair of its core files. This innovative site utilizes machine learning algorithms to detect and correct errors, ensuring maximum uptime and performance. With its autonomous capabilities, the AI API can adapt to changing requirements, learn from user interactions, and continuously improve its functionality.
View Details
Page Views

This page has been viewed 1 times.

Search cybersec
Search cybersec by entering your search text above.
Category List cybersec