Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-0665. PoCs published by gunzf0x.
AI-analyzed exploit summary This PoC exploits CVE-2020-0665, a SID filter bypass vulnerability, by using Frida to intercept and hook processes (e.g., lsass.exe) to manipulate SID values in memory. It requires SYSTEM privileges and targets Windows Server environments.
Description
An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'.
Exploits (1)
This PoC exploits CVE-2020-0665, a SID filter bypass vulnerability, by using Frida to intercept and hook processes (e.g., lsass.exe) to manipulate SID values in memory. It requires SYSTEM privileges and targets Windows Server environments.
References (1)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H