Month: <span>January 2022</span>

Unauthenticated Dumping of Usernames via Cisco Unified Call Manager (CUCM)

January 29, 2022
ExploitPentestingResearch
0 Comment

This blog is about something I found recently regarding Cisco Unified Call Manager (CUCM).  While playing around with SeeYouCM Thief, which is designed to download parse configuration files from Cisco phone systems, I noticed something interesting within a configuration file. There was an XML element in the configuration files named <secureUDSUsersAccessURL>.  The value pointed to…

Read More

Adding DCSync Permissions from Linux

January 19, 2022
PentestingpersistencePost Exploitation
0 Comment

Recently I came upon an attack path in BloodHound that looked like this: I had control of a computer object (an Exchange server) that effectively had WriteDacl over the domain. I had a few constraints as well: All systems were configured with EDR I only had the AES key of the computer account, not the…

Read More