Security & Threat Intelligence · 25.07.2026, 15:29 UTC
Ludus SCCM Lab Expansion
| Schweregrad | info |
|---|---|
| Kategorie | Security & Threat Intelligence |
| Quelle | SpecterOps ↗ |
| Veröffentlicht | 25.07.2026 UTC |
Sicherheitsmeldung mit Schweregrad noch nicht bewertet. Technische Details im Tab „Originaltext“; empfohlene Schritte in der Checkliste.
TL;DR : While writing ConfigManBearPig, a PowerShell script that enables collection of SCCM-related attack paths for visualization in BloodHound, I needed a lab that was representative of enterprise SCCM hierarchies to test my code against a variety of possible configurations. I wanted to publish these Ludus templates that automate deployment of a large SCCM lab environment to encourage others to dive into SCCM research without having to go through the pain of manual deployment.
Repo: https://github.com/Mayyhem/ludus_sccm
Lab Overview
This project builds on Zach Stein’s (@synzack21) and Erik Hunstad‘s excellent Ludus SCCM project (https://github.com/Synzack/ludus_sccm) to expand the standalone primary site (PS1) to a parent central administration site (CAS) and child secondary site (SEC), resulting in a three-tiered SCCM hierarchy with:
A domain controller (DC)
A central administration site (CAS) with the following site system roles:
site database (CAS-DB)
service connection point (CAS-SCP)
A child primary site (PS1) under CAS with the following site system roles installed on separate systems:
site database (PS1-DB)
SMS Provider (PS1-SMS)
management point (PS1-MP)
distribution point (PS1-DP)
content library (PS1-LIB)
passive site server (PS1-PSV)
development workstation (PS1-DEV)
A child secondary site (SEC) under PS1 with a secondary site server (PS1-SEC) hosting the management point and distribution point site system roles
In CAS and PS1, each of the site system roles are installed on a system that is remote from the primary site server and other site …