VulnerabilitiesCertighost: New Exploit Turns Ordinary Windows Users Into Domain Controllers
A public proof-of-concept lets any low-privileged Active Directory account impersonate a domain controller and retrieve the master key to every user's login on the network.
