Windows Exploitation Tricks: Relaying DCOM Authentication
Google Project Zero's James Forshaw detailed a technique for relaying DCOM authentication locally, building on his 2015 issue 325 (fixed as CVE-2015-2370) and the later RottenPotato and RemotePotato exploits, the latter unpatched as of October 2021. The...