EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Aug 31·5 min read
Privilege escalation from IIS AppPool to NT Authority/SYSTEM
TL;DR
A method to escalate privileges from IIS AppPool to NT Authority/SYSTEM is demonstrated, exploiting a Windows behavior that elevates identity when accessing network resources. This technique allows attackers to obtain machine account privileges without traditional exploits.
✦ Why It Matters
Review your IIS configurations to prevent unauthorized privilege escalation through network resource access.
Key Takeaways
- Understand how IIS AppPool identity elevation works.
- Implement strict access controls on network resources.
- Regularly audit Active Directory Certificate Services configurations.
- Use security tools to monitor for unauthorized certificate requests.
How It Works
When an IIS AppPool identity accesses a network resource, Windows elevates its identity to the machine account of the host. This allows attackers to submit a CSR to AD CS, which issues a certificate as if it came from the machine account.
The attacker can then use this certificate to request a TGT, enabling them to impersonate an administrator.