What is the prerequisite for exploiting vCenter's LDAP database to add an administrator user, and how does this method bypass the need for an existing admin password?
The prerequisite is obtaining the administrator user's password, often through previous methods like the vSphere Automation API or PowerCLI. However, once you have the LDAP credentials (exported via `lwregshell`), you can directly connect to the LDAP database and use `ldapadd` to create a new user with administrative privileges, effectively bypassing the need to know the current admin password.
vCenter LDAP exploitationLDAP credentialsprivilege escalation