Posts tagged "pki"
3 posts
ESC17 - Beyond WSUS: Intercepting Internal HTTPS
ESC17 forges a domain-trusted certificate. Against internal HTTPS, it surfaces credentials, session tokens, and Windows authentications in the clear.
July 26, 2026 · 25 min read
ESC17 - Beyond WSUS: Introduction and Threat Model
ESC17 is not a WSUS bug but a PKI trust problem in ADCS. The first part of a research series that maps out its attack surface.
July 26, 2026 · 10 min read
ESC17 - Beyond WSUS: RDP Interception and NLA Bypass
ESC17 removes the RDP certificate warning. NLA downgrade no longer works against a modern client, but terminating CredSSP captures the password despite NLA.
July 26, 2026 · 17 min read