Research on Domain Privilege Escalation Mechanism Based on sAMAccountName Spoofing

The Windows Active Directory domain environment, being a crucial approach for internal network management, renders the security of the Kerberos authentication protocol it depends on increasingly vital. This paper focuses on the domain privilege escalation vulnerability based on sAMAccountName spoofing. It conducts a comprehensive analysis of its technical principles and attack paths. The privilege escalation process is meticulously designed to elucidate the technical focal points and vulnerability triggering conditions of each link. Ultimately, through the establishment of a domain environment for practical verification, the attack process of escalating from regular domain user privileges to domain administrator privileges is successfully replicated. Additionally, it offers targeted defense strategies for the security protection of the domain environment, which hold certain reference significance for the security research of domain environments.