created: "2025-05-25 23:50" tags: Type: Note aliases: - sAMAccountName spoofing updated: "2025-05-25 23:50"
"sAMAccountName spoofing" 是一种针对 Active Directory 的高级攻击技术，它利用了与计算机账户相关的两个微软漏洞：
CVE-2021-42278 (sAMAccountName 欺骗) CVE-2021-42287 (域控制器冒充)