
Privilege Escalation from IIS AppPool to NT Authority/SYSTEM via AD CS RPC Endpoint
privilege-escalationIISAppPoolNT-AuthoritySYSTEMAD-CSRPCexploitcybersecurity
The Reddit post references a privilege escalation technique allowing an attacker to escalate from an IIS AppPool identity to NT Authority/SYSTEM by exploiting an AD CS (Active Directory Certificate Services) RPC endpoint. The linked article provides details on the method.