Impacket-RaiseChild
NEW Privilege EscalationLateral MovementExecution LinuxActiveDirectoryWindows
Impacket raiseChild.py automates child-domain-to-forest-root privilege escalation by abusing the intra-forest trust. Given Domain Admin credentials in a child domain it DCSyncs the child krbtgt, forges a golden ticket with an Enterprise Admins ExtraSid from the forest root, and uses it to compromise the parent, optionally executing a command on the root DC. Requires child-domain administrative credentials. Command Reference: Child domain: test.local Username: john Password: password123