# Weaponize

Published articles for Weaponize.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Attacking Smart Card Based Active Directory Networks

DevFeed: [Attacking Smart Card Based Active Directory Networks](<https://devfeed.tech/articles/attacking-smart-card-based-active-directory-networks-32631.md>)

Original publisher: [Read original article](<https://ethicalchaos.dev/2020/10/04/attacking-smart-card-based-active-directory-networks/>)

Author: CCob

Published: 2020-10-04T19:31:42Z

Content type: tutorial

Language: en

Sources: [Ethical Chaos](<https://devfeed.tech/sources/ethical-chaos.md>)

Topics: [active directory](<https://devfeed.tech/topics/active-directory.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [certificates](<https://devfeed.tech/topics/certificates.md>), [private key](<https://devfeed.tech/topics/private-key.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [kerberos](<https://devfeed.tech/topics/kerberos.md>), [public key](<https://devfeed.tech/topics/public-key.md>)

Tags: [active-directory](<https://devfeed.tech/tags/active-directory.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [certificates](<https://devfeed.tech/tags/certificates.md>), [cobalt-strike](<https://devfeed.tech/tags/cobalt-strike.md>), [hooking](<https://devfeed.tech/tags/hooking.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [pin](<https://devfeed.tech/tags/pin.md>), [pinswipe](<https://devfeed.tech/tags/pinswipe.md>), [pki](<https://devfeed.tech/tags/pki.md>), [private-key](<https://devfeed.tech/tags/private-key.md>), [public-key](<https://devfeed.tech/tags/public-key.md>), [rubeus](<https://devfeed.tech/tags/rubeus.md>), [smart-card](<https://devfeed.tech/tags/smart-card.md>), [swipe](<https://devfeed.tech/tags/swipe.md>), [weaponize](<https://devfeed.tech/tags/weaponize.md>)

### AI overview

This article examines attacks against smart-card-enforced Active Directory networks. It explains that a physical smart card is not necessarily required for smart-card logon when the corresponding private key is available, describes certificate requirements and policy-related certificate abuse, and introduces PKINIT as public-key support for Kerberos pre-authentication.

### Source excerpt

Introduction Recently I was involved in an engagement where I was attacking smart card based Active Directory networks. The fact is though, you don't need a physical smart card at all to authenticate to Active Directory that enforces smart card logon. The attributes of the certificate determine if it can be used for smart card [...] The post Attacking Smart Card Based Active Directory Networks appeared first on Ethical Chaos.

## SweetPotato - Local Service to SYSTEM

DevFeed: [SweetPotato - Local Service to SYSTEM](<https://devfeed.tech/articles/sweetpotato-local-service-to-system-32628.md>)

Original publisher: [Read original article](<https://ethicalchaos.dev/2020/04/13/sweetpotato-local-service-to-system-privesc/>)

Author: CCob

Published: 2020-04-13T17:30:53Z

Content type: article

Language: en

Sources: [Ethical Chaos](<https://devfeed.tech/sources/ethical-chaos.md>)

Topics: [Exploit](<https://devfeed.tech/topics/exploit.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [.NET](<https://devfeed.tech/topics/net.md>), [Security](<https://devfeed.tech/topics/security.md>), [C2](<https://devfeed.tech/topics/c2.md>)

Tags: [c-sharp](<https://devfeed.tech/tags/c-sharp.md>), [c2](<https://devfeed.tech/tags/c2.md>), [cobalt-strike](<https://devfeed.tech/tags/cobalt-strike.md>), [dcom](<https://devfeed.tech/tags/dcom.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [juicypotato](<https://devfeed.tech/tags/juicypotato.md>), [privesc](<https://devfeed.tech/tags/privesc.md>), [rottenpotato](<https://devfeed.tech/tags/rottenpotato.md>), [sweetpotato](<https://devfeed.tech/tags/sweetpotato.md>), [weaponize](<https://devfeed.tech/tags/weaponize.md>), [windows](<https://devfeed.tech/tags/windows.md>), [winrm](<https://devfeed.tech/tags/winrm.md>)

### AI overview

This article introduces SweetPotato, a C# rewrite of JuicyPotato that performs local service-account to SYSTEM privilege escalation on Windows. It adds a BITS/WinRM-based technique and can automatically select between exploit methods depending on the Windows version.

### Source excerpt

Upgraded JuicyPotato performing Local Service to SYSTEM privilege escalation on Windows 7 to the latest Windows 10 / Server 2019. The post SweetPotato - Local Service to SYSTEM appeared first on Ethical Chaos.

## Weaponizing your favorite Go program for Cobalt Strike

DevFeed: [Weaponizing your favorite Go program for Cobalt Strike](<https://devfeed.tech/articles/weaponizing-your-favorite-go-program-for-cobalt-strike-32625.md>)

Original publisher: [Read original article](<https://ethicalchaos.dev/2020/01/26/weaponizing-your-favorite-go-program-for-cobalt-strike/>)

Author: CCob

Published: 2020-01-26T17:40:54Z

Content type: tutorial

Language: en

Sources: [Ethical Chaos](<https://devfeed.tech/sources/ethical-chaos.md>)

Topics: [Go Language](<https://devfeed.tech/topics/go-language.md>), [CMake](<https://devfeed.tech/topics/cmake.md>), [gcc](<https://devfeed.tech/topics/gcc.md>), [Compiler](<https://devfeed.tech/topics/compiler.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [bypass](<https://devfeed.tech/tags/bypass.md>), [cmake](<https://devfeed.tech/tags/cmake.md>), [cobalt-strike](<https://devfeed.tech/tags/cobalt-strike.md>), [compiler](<https://devfeed.tech/tags/compiler.md>), [edr](<https://devfeed.tech/tags/edr.md>), [gcc](<https://devfeed.tech/tags/gcc.md>), [github](<https://devfeed.tech/tags/github.md>), [go](<https://devfeed.tech/tags/go.md>), [golang](<https://devfeed.tech/tags/golang.md>), [reflective-dll](<https://devfeed.tech/tags/reflective-dll.md>), [weaponize](<https://devfeed.tech/tags/weaponize.md>), [weaponizing](<https://devfeed.tech/tags/weaponizing.md>)

### AI overview

This tutorial explains how to adapt a Go program into a reflective DLL for in-memory execution within Cobalt Strike. It presents a GitHub template based on gobuster and describes its use of CMake, GCC, the Go compiler, and CGO.

### Source excerpt

How to convert a Go program to a reflective DLL for Cobalt Strike The post Weaponizing your favorite Go program for Cobalt Strike appeared first on Ethical Chaos.