Windows HTTP.SYS Kerberos PAC Verification Bypass / Privilege Escalation
Posted by deepcore on December 9, 2022 – 5:41 pm
The HTTP server implemented in HTTP.SYS on Windows handles authentication in a system thread which bypasses PAC verification leading to escalation of privilege.
Post a reply
You must be logged in to post a comment.