OUR BLOG

News and Insights

The latest news, insights and research from the Cyndicate Labs team, covering penetration testing, red teaming, threat-led assurance and the wider cyber security landscape.

RTD0x1 – Writeable Web Root → Domain Admin via Custom CLR Assemblies
Research

RTD0x1 – Writeable Web Root → Domain Admin via Custom CLR Assemblies

This blog post is the first in the series of Cyndicate Labs Red Team diaries collection. We hope to detail some of the steps that took us from a standard low privileged user in an organisation, hereafter known as client, to full domain compromise, later allowing us to achieve all defined objectives agreed between us and the client.

RTD0x1 – Writeable Web Root → Domain Admin via Custom CLR Assemblies
Research

RTD0x1 – Writeable Web Root → Domain Admin via Custom CLR Assemblies

This blog post is the first in the series of Cyndicate Labs Red Team diaries collection. We hope to detail some of the steps that took us from a standard low privileged user in an organisation, hereafter known as client, to full domain compromise, later allowing us to achieve all defined objectives agreed between us and the client.

Get in touch

Speak to a cyber security expert

Ready to understand your cyber risk, validate your defences or meet a regulatory requirement? Talk to Cyndicate Labs about penetration testing, red teaming, purple teaming and threat-led assurance.

Speak To Us