sccm-exploitation

What problem does it solve?

This Skill helps penetration testers identify and exploit vulnerabilities within Microsoft SCCM/MECM infrastructure to gain credentials, move laterally, and escalate privileges within a target domain.

Core Features & Use Cases

• SCCM Enumeration: Discover SCCM site servers, management points, and client configurations.
• Credential Harvesting: Extract Network Access Account (NAA) credentials, PXE boot secrets, and database credentials.
• Lateral Movement & Escalation: Utilize management point relay, client push account relay, and application deployment for advanced attacks.
• Use Case: After discovering an SCCM server, use this Skill to harvest the Network Access Account credentials, which are often used for automated tasks, and then leverage those credentials to deploy a malicious payload to all domain-joined machines.

Quick Start

Use the sccm-exploitation skill to enumerate SCCM infrastructure in the domain.