active-directory-kerberos-attacks

Kerberoasting extracts service account credential hashes by requesting TGS tickets from Active Directory. This Skill provides expert guidance to execute Kerberoasting alongside AS-REP roasting for offline hash cracking and privilege escalation.

Golden tickets forge TGTs using the domain's krbtgt hash, while silver tickets forge TGS tickets using a service account hash. This Skill guides you through executing both attacks, plus diamond and sapphire ticket variations for domain persistence.

You can chain Kerberos attacks by combining pass-the-ticket or overpass-the-hash with ACL abuse, ADCS exploitation, and relay attacks. This Skill maps multi-step attack chains from initial foothold to full domain admin escalation.

Yes, Kerberos delegation abuse allows impersonation of users to access restricted services. This Skill covers techniques for exploiting unconstrained and constrained delegation as part of broader Active Directory authentication bypass campaigns.

Yes, you need a solid understanding of the Kerberos protocol and Active Directory infrastructure. This Skill provides advanced, multi-step attack execution guidance rather than foundational concepts, targeting administrative workflows involving AD authentication.

Pass-the-ticket uses existing Kerberos tickets directly, while overpass-the-hash uses an NTLM hash to request new tickets. This Skill details both techniques to facilitate lateral movement across Active Directory environments.