Read the Bits, Not the Integer: msPKI-Certificate-Name-Flag and the ESC4⤍ESC1 Chainhttps://www.reddit.com/r/netsec/comments/1wdbsor/read_the_bits_not_the_integer
Stop using static integers to hunt for AD CS vulnerabilities. If your cheat sheet says msPKI-Certificate-Name-Flag == 1 , you are missing complex attack paths. Published my field notes on why we need to read the bits, not the integer. submitted by /u/thesecretmyth [link] [comments]