
GIUDA
Ask a TGS on behalf of another user without password
authenticationexploitationimpersonation-tools+5

Ask a TGS on behalf of another user without password

A C# implementation of dumping credentials from Windows Credential Manager

This vulnerability allows unauthenticated attackers who know a valid administrator username to impersonate that admin during REST API requests by…