Privilege Escalation from IIS AppPool to NT Authority/SYSTEM via AD CS RPC Endpoint

Demonstrate a sophisticated privilege escalation technique exploiting Windows IIS AppPool identity elevation to obtain machine account certificates from AD CS, leading to…