ConfigManBearPig 2.0 – Things Are Getting Cereal
Summary
ConfigManBearPig 2.0 is a Python rewrite of a script designed to identify misconfigurations in Microsoft Configuration Manager (formerly SCCM). Over the past several years, more than 30 attack techniques have been discovered targeting SCCM due to its broad control over an organization's devices.
IFF Assessment
The article describes new research and tools that can identify misconfigurations in a widely used system, which could be exploited by attackers.
Defender Context
This article highlights the ongoing security challenges associated with widely deployed infrastructure management tools like Microsoft Configuration Manager. Defenders should be aware that these systems are prime targets for attackers seeking to gain broad access and should prioritize regular audits for misconfigurations and apply relevant security best practices.