Skeleton Key

Skeleton Key modifies the authentication process on a domain controller in memory. While the patch is active, an injected password can authenticate as any domain user against that controller while legitimate passwords continue to work. A reboot erases the in-memory patch. Wider access depends on the authentication paths that trust the affected controller, especially services using single-factor authentication.