https://ethicalhacker.tech/tags/kerberos/ Recent content in Kerberos on ethicalhacker.tech Hugo en-GB https://ethicalhacker.tech/notes/kerberoasting/ Mon, 01 Jan 0001 00:00:00 +0000 https://ethicalhacker.tech/notes/kerberoasting/ <h2 id="what-is-it">what is it?</h2> <p>Kerberoasting is an Active Directory attack that allows any authenticated domain user to request Kerberos service tickets (TGS) for accounts that have a Service Principal Name (SPN) set. Those tickets are encrypted with the service account&rsquo;s NTLM hash, meaning they can be taken offline and cracked without any further interaction with the domain controller.</p> <p>The attack is particularly effective because SPNs are often set on service accounts with weak passwords, and requesting a TGS is a normal, logged operation that blends in with everyday traffic.</p>