Skip to content

Conversation

CravateRouge
Copy link

The AllExtendedRights and UserForceChangePassword rights allow also to change the password of the computer. It will probably not be seen in production environment but can be useful in CTF.

@CravateRouge
Copy link
Author

@rvazarkar I think it's useful to see this edge case event if it's uncommon. I want to be able to cover it if it happens during my tests

@rvazarkar
Copy link
Contributor

So I think we do want to support this, but we're going to want to add this as a discrete edge called ResetComputerPassword and make it abundantly clear that this could likely cause issues if used in real environments unless handled very carefully

@ZkClown
Copy link

ZkClown commented Aug 27, 2025

Hello @rvazarkar ,
During an assessment, my team and I have found this edge on a test computer that the enterprise had created and almost missed it if we had not checked the ACE using other tools (like bloodyAD). I think it could be cool to have this implemented. I know that BloodHound.py which is the python ingestor handles it.
Best regards.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants