foxlox/GIUDA

Scenario: you are Local Administrator and there is a logged User you want to Impersonate! Goal: From Local Admin to Domain Admin with Kerberos TGS Required: Local Administrator and a Domain Admin Logged (or Disconnected). In this guide the Domain Admin User is CALIPENDULA\fagiolo

GIUDA is a tool that allows a Local Administrator to impersonate another user without needing their password. This guide explains how to use GIUDA to gain access to a Domain Admin account. The first step is to ask GIUDA for a shell as SYSTEM. This can be done by using the command GIUDA -runaslsass or GIUDA -runaspid:PID. The next step is to ask GIUDA to show all logged user's LUID. This can be done by using the command GIUDA -askluids. Once the LUID of the user to be impersonated is identified, the next step is to ask GIUDA to get the msdsspn that is needed.

GIUDA is a powerful tool that can be used to gain access to a Domain Admin account without needing the user's password. It is important to note that the user must be logged in or disconnected for the tool to work. This guide provides a step-by-step explanation of how to use GIUDA to impersonate another user. Credit is due to ewan22 for creating a set of Pascal Units for AD that make GIUDA possible.

📓 foxlox/GIUDA

👉🏽 Scenario: you are Local Administrator and there is a logged User you want to Impersonate! Goal: From Local Admin to Domain Admin with Kerberos TGS Required: Local Administrator and a Domain Admin Logged (or Disconnected). In this guide the Domain Admin User is CALIPENDULA\fagiolo 👉🏽 GIUDA allows Local Administrators to impersonate users without their password. 👉🏽 The guide explains how to use GIUDA to gain access to a Domain Admin account. 👉🏽 The first step is to request a shell as SYSTEM using the GIUDA command. 👉🏽 Another option is to use the GIUDA command to request a shell using a specific PID. 👉🏽 The next step is to use GIUDA to display all logged user's LUID. 👉🏽 Identifying the LUID of the user to be impersonated is necessary. 👉🏽 GIUDA can also retrieve the msdsspn necessary for the impersonation process. 👉🏽 The tool provides a method to gain access to a Domain Admin without passwords. 👉🏽 The user must be logged in or disconnected for GIUDA to function properly. 👉🏽 The guide offers a detailed step-by-step explanation of how to use GIUDA.

🔗 source link: https://github.com/foxlox/GIUDA.git

🔗 summarized content: https://hut.threathunterz.com/battlefield-intel/tradecraft-tools/foxloxgiuda

#GIUDA #LocalAdministrator #DomainAdmin #shellasSYSTEM #impersonateuser