Back to Details

system

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

System

系统

Test system-level security including Active Directory, privilege escalation, and exploit development.
测试系统级安全性，包括Active Directory、权限提升以及漏洞利用开发。

Techniques

技术手段

TypeKey Vectors
Active DirectoryKerberoasting, AS-REP roasting, DCSync, PtH, Golden/RODC Ticket, RBCD, ACL abuse, KeyList, Shadow Credentials, ADCS (ESC1-9/16)
Privilege EscalationSUID/sudo abuse, kernel exploits, service misconfig, token manipulation
Exploit DevelopmentBuffer overflow, format string, ROP chains, shellcode, heap exploitation
类型核心攻击向量
Active DirectoryKerberoasting, AS-REP roasting, DCSync, PtH, Golden/RODC Ticket, RBCD, ACL abuse, KeyList, Shadow Credentials, ADCS (ESC1-9/16)
权限提升SUID/sudo滥用、内核漏洞利用、服务配置错误、令牌操纵
漏洞利用开发缓冲区溢出、格式化字符串、ROP链、Shellcode、堆利用

Workflow

工作流程

  1. Enumerate system and domain information
  2. Identify escalation paths and misconfigurations
  3. Exploit with appropriate techniques
  4. Demonstrate impact (domain admin, root access)
  5. Document attack chain with evidence
  1. 枚举系统和域信息
  2. 识别权限提升路径和配置错误
  3. 使用合适的技术手段进行漏洞利用
  4. 展示攻击影响（域管理员权限、root权限）
  5. 记录攻击链并留存证据

Reference

参考资料

  • reference/system-exploitation.md
    - AD attacks, privilege escalation, exploit development techniques
  • reference/format-string-exploitation.md
    - Format string read/write primitives, architecture differences, mitigation bypass
  • reference/heap-exploitation.md
    - Modern glibc heap techniques (tcache poison, unsorted bin leak, environ stack leak, ROP)
  • reference/system-exploitation.md
    - Active Directory攻击、权限提升、漏洞利用开发技术
  • reference/format-string-exploitation.md
    - 格式化字符串读写原语、架构差异、绕过缓解措施
  • reference/heap-exploitation.md
    - 现代glibc堆利用技术（tcache投毒、未排序bin泄露、environ栈泄露、ROP）