Chris ThompsoninPosts By SpecterOps Team MembersRooting out Risky SCCM Configs with Misconfiguration Managertl;dr: I wrote a script to identify every TAKEOVER and ELEVATE attack in Misconfiguration Manager.4 min read·Apr 11, 2024----
Chris ThompsoninPosts By SpecterOps Team MembersSCCM Hierarchy TakeoverOne Site to Rule Them All10 min read·Sep 25, 2023--1--1
Chris ThompsoninPosts By SpecterOps Team MembersSCCM Site Takeover via Automatic Client Push Installationtl;dr: Install hotfix KB15599094 and disable NTLM for client push installation.8 min read·Jan 12, 2023----
Chris ThompsoninPosts By SpecterOps Team MembersRelaying NTLM Authentication from SCCM Clientstl;dr: Seriously, please disable NTLM11 min read·Jun 30, 2022----
Chris ThompsoninPosts By SpecterOps Team MembersCoercing NTLM Authentication from SCCMtl;dr: Disable NTLM for Client Push Installation24 min read·Apr 13, 2022--1--1