AD on Maximilian Hildebrandhttps://m10x.de/tags/ad/Recent content in AD on Maximilian HildebrandHugoen<a href="https://creativecommons.org/licenses/by-nc/4.0/" target="_blank" rel="noopener">CC BY-NC 4.0</a>Fri, 04 Sep 2026 04:00:56 +0100Shadow Credentialshttps://m10x.de/posts/2026/09/shadow-credentials/Fri, 04 Sep 2026 04:00:56 +0100https://m10x.de/posts/2026/09/shadow-credentials/Since late 2023, when I started conducting internal penetration tests, thanks to Alh4zr3d, &ldquo;Shadow Credentials&rdquo; has been my favorite method for gaining administrative privileges on systems on the network. However, I’ve often run into a quirk that got in the way: A computer account can only set its msDS-KeyCredentialLink attribute if it’s empty. But if, for example, Windows Hello is already enabled on the system and the attribute is therefore already set, Shadow Credentials via relaying fails.