Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

https://zhuanlan.zhihu.com/p/449763750
https://www.jianshu.com/p/ab713b8b3045
https://blog.csdn.net/weixin_42282189/article/details/122050367
https://www.heibai.org/2071.html
https://github.com/WazeHell