Active Directory Domain Trust: Abusing Child-to-Parent Trust
INTRODUCTION Domain Trust relationships in Active Directory are fundamental to allowing users from one domain to access resources in other domains. However, from a Red Teaming perspective, these relationships represent an excellent vector for privilege escalation and lateral movement. In this post, we will explore how to abuse a Child-to-Parent trust relationship within the same forest to escalate privileges from a fully compromised subdomain to the root domain. KEY CONCEPTS What is a Domain Trust? It is a trust mechanism between two domains that enables cross-domain authentication. Its key properties are: ...