active-directory-kerberos-attacks

AS-REP Roasting and Kerberoasting exploit Kerberos vulnerabilities in Active Directory environments for reconnaissance and credential harvesting. The Skill provides comprehensive steps for executing these attacks using Python and tools like impacket and mimikatz to extract ticket-granting tickets and service tickets.

Forging Golden and Silver Tickets involves creating forged Kerberos tickets to gain unauthorized access within Active Directory. The Skill provides instructions for creating Golden, Silver, Diamond, and Sapphire tickets using tools like mimikatz and impacket to manipulate ticket-granting tickets and service tickets.

RBCD abuse leverages Resource-Based Constrained Delegation for lateral movement and credential harvesting within the network. The Skill explains how to exploit RBCD configurations in Active Directory to impersonate users and access additional resources across the domain using tools like impacket and PowerShell.

Yes, the Skill utilizes Python with various libraries and PowerShell to execute advanced Kerberos attack chains. It features multi-step attack paths that combine Kerberos attacks with ACL abuse and other Active Directory techniques for comprehensive penetration testing and privilege escalation.

The Kerberos Double Hop Problem prevents credentials from being passed across multiple remote sessions. The Skill details solutions using CredSSP, unconstrained delegation, constrained delegation, RBCD, and Invoke-Command nested sessions to maintain authentication across multiple hops.

Yes, impacket and mimikatz are required dependencies for executing the Kerberos attacks provided by the Skill. The Skill relies on Python with various libraries and these specific tools for reconnaissance, lateral movement, ticket forgery, and privilege escalation in Active Directory environments.