Documentation overview
Feel free to add me on Discord (ice0) or linkedin if you have any questions about the attacks or setting up the SCCM lab.
This is just a walkthrough. All credit for the original research on SCCM goes to the people at SpecterOps, Synacktiv, and MWR CyberSec.
Changelog
- 21/05/2025 - Added Domain Credentials in PXE boot images/files to the SCCM - Other page.
- 21/05/2025 - Will soon add stuff about WSUS/more takeover attacks.