active-directory-kerberos-attacks

What problem does it solve?

This Skill unit provides advanced techniques for conducting targeted Kerberos attacks within Active Directory environments, helping security professionals to identify and exploit potential vulnerabilities.

Core Features & Use Cases

• Kerberos Authentication Exploits: Offers comprehensive steps for AS-REP Roasting, Kerberoasting, Golden Ticket forging, and Delegation Abuse.
• Advanced Attack Chains: Features multi-step attack paths that combine Kerberos attacks with ACL abuse and other AD techniques.
• Resource-Based Constrained Delegation (RBCD): Explains how to leverage RBCD for lateral movement and credential harvesting within the network.
• Ticket Forgery: Provides instructions for creating Golden, Silver, Diamond, and Sapphire tickets to gain unauthorized access.
• Multi-Hop Kerberos Authentication: Details the Kerberos Double Hop Problem and solutions using CredSSP, unconstrained delegation, constrained delegation, RBCD, and Invoke-Command nested sessions.

Quick Start

Run the skill with 'active-directory-kerberos-attacks' to load the Kerberos attack playbook and start exploring various attack chains and techniques.