pentester.land· Aug 10, 2023· by Garrett Foster (@garrfoster)

Site Takeover via SCCM’s AdminService API

Target Program: -

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#NTLM#SCCM site takeover