CVE-2014-6324

This exploit leverages CVE-2014-6324 (MS14-068) to forge Kerberos tickets, allowing privilege escalation in Active Directory environments. It manipulates PAC validation to grant arbitrary domain privileges.

This repository contains a functional Python exploit for CVE-2014-6324 (MS14-068), a Kerberos vulnerability allowing privilege escalation in Active Directory. The exploit manipulates Kerberos tickets to grant domain admin privileges to a user account.

This Metasploit module exploits CVE-2014-6324 (MS14-068) by forging a Privilege Attribute Certificate (PAC) in Kerberos TGS requests to escalate domain user privileges to Domain Administrator. It generates a TGT ticket with a forged PAC and exports it to a MIT Kerberos Credential Cache file.