Catalog WADComs

WAD · Tool

Impacket-owneredit

1 technique Linux · ActiveDirectory · WindowsWADComs GPL-3.0

Privilege Escalation

NEW
Privilege EscalationExecutionPersistence LinuxActiveDirectoryWindows

Impacket's owneredit.py reads or changes the owner set in an object's security descriptor over LDAP. Because the owner has implicit WriteDacl, `-action write -new-owner` lets you seize ownership of a target you hold WriteOwner over, then combine it with dacledit.py to grant yourself full control. Use `-action read` first to record the original owner for cleanup. Together owneredit + dacledit reproduce the WriteOwner-to-takeover chain on Linux. Command Reference: DC IP: 10.10.10.1 Domain: test.local Username: john Password: password123 New owner: john Target object: victim

# Set john as the owner of the victim object
owneredit.py -action 'write' -new-owner 'john' -target 'victim' -dc-ip 10.10.10.1 'test.local/john:password123'
Native
PrivEsc, Exploitation, Persistence
Requires
Username, Password
Services
LDAP