active-directory-acl-abuse

BloodHound ACL abuse identifies misconfigured permissions like GenericAll, WriteDACL, and DCSync by mapping relationship graphs and shortest paths from compromised principals to privileged targets. It translates these dangerous ACEs into concrete attack actions and operational steps to escalate access and achieve high-impact outcomes.

Purpose-built BloodHound Cypher queries locate shortest paths from owned principals to high-value targets like Domain Admins. These queries map ACL relationships and attack-path patterns to select efficient escalation routes based on specific ACE misconfigurations such as LAPS reading or GPO write access.

Active Directory privilege escalation techniques include exploiting GenericAll, GenericWrite, WriteDACL, WriteOwner, ForceChangePassword, DCSync rights, LAPS reading, and GPO write access. The Skill maps these dangerous permissions to specific attack playbooks for executing concrete operational steps.

Yes, BloodHound supports multi-step chain analysis by applying purpose-built Cypher queries and attack-path patterns to select efficient escalation routes. This enables chain-based decision making for reaching high-value targets like Domain Admins from a compromised user position.

Investigate LAPS reading or GPO write access when BloodHound enumeration reveals these specific dangerous permissions along the shortest path to privileged targets. The Skill evaluates these ACE misconfigurations and outlines exact exploitation steps based on the discovered attack paths.