SCCM Takeover Relay

Use this skill to plan or execute SCCM TAKEOVER-1-style hierarchy takeover validation: coerce NTLM from a privileged SCCM site system, relay it to the site database over MSSQL, grant a chosen domain account the SCCM Full Administrator role, and verify the new role assignment.

This skill is for authorized lab validation only. It is OPSEC-sensitive and must remain tightly scoped.

Direct Triggers

Use this skill when the task mentions any of the following:

• SCCM takeover
• ConfigMgr takeover
• site takeover
• NTLM relay to MSSQL for SCCM
• coercing a site server, SMS Provider, or passive site server
• Misconfiguration-Manager TAKEOVER-1

Input Contract