⬇ Download holy card: ·
Saint PetitPotam, Who Made Servers Introduce Themselves
Patron of Active Directory, domain controllers, and those who can be talked into signing first.
Life
In July 2021 the researcher known as topotam revealed PetitPotam: by abusing a Windows function (later patched as CVE-2021-36942 and CVE-2022-26925), one could coerce a server, even a domain controller, to authenticate to a machine of the attacker's choosing. Relaying that authentication to the certificate services led to taking over the whole domain. A little nudge, and the server ran off to introduce itself to the stranger.
Prayer
O Saint PetitPotam, who makes servers run to the first who calls, teach our machines not to authenticate with just anyone. Amen.
How to celebrate
Celebrated by applying the patches, enforcing signing and extended protection for authentication, and securing the certificate services.
A server that runs to the call, a domain that changes master.