#shadow-credentials

Fluffy: Shadow Credentials and ADCS ESC16

Active Directory chain — CVE-2025-24071 hash leak, Shadow Credentials via GenericWrite, and ADCS ESC16 UPN hijack to Domain Admin.