Documentation Index
Fetch the complete documentation index at: https://docs.specterops.io/llms.txt
Use this file to discover all available pages before exploring further.
For comprehensive information on DPERSIST2, please refer to Certified Pre-Owned.
Overview
DPERSIST2 involves trusting rogue CA certificates to establish domain persistence. This technique allows attackers to maintain access by installing malicious Certificate Authority certificates into the domain’s trusted root certificate store.Resources
For detailed implementation and methodology, consult the original research:- Certified Pre-Owned Research Paper by Will Schroeder and Lee Chagolla-Christensen
- SpecterOps blog posts on AD CS security