badS4U2self

Reported Context (1)

The Ouroboros chain continued to function: Certipy authenticated as dmsa-adriana via PKINIT using the planted certificate, and badS4U2self returned svc-ouroboros's current NT hash. Ouroboros Enables Persistent Credential Extraction from Windows Server 2025 dMSAs

CVE (1)

People (3)

MITRE ATT&CK (3)

Vendors (1)

Products (3)

Tools (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.