Search msDS-AllowedToActOnBehalfOfOtherIdentity
-
Updated
May 10, 2026 - C#
Search msDS-AllowedToActOnBehalfOfOtherIdentity
focused tool to search and audit msDS-AllowedToActOnBehalfOfOtherIdentity attributes in Active Directory — detecting RBCD misconfigurations, Kerberos delegation risks, and privilege escalation paths.
post-exploitation tool for computer object takeover via Resource-Based Constrained Delegation modify msDS-AllowedToActOnBehalfOfOtherIdentity attributes to abuse Kerberos delegation and escalate privileges in Active Directory.
Active Directory Kerberos Delegation Audit Tool - 100% Defensive Security
Computer object takeover through Resource-Based Constrained Delegation msDS-AllowedToActOnBehalfOfOtherIdentity
Add a description, image, and links to the rbcd topic page so that developers can more easily learn about it.
To associate your repository with the rbcd topic, visit your repo's landing page and select "manage topics."