166 terms · 75/46/45
Technique № 022 · class: privileges

Forge Kerberos Tickets

A set of techniques exploiting the Kerberos protocol in Active Directory.

Term

description · examples · notes

A set of techniques exploiting the Kerberos protocol in Active Directory.

Description

Kerberoasting — offline cracking of service account TGS tickets.

Golden Ticket — forging TGT tickets with a compromised KRBTGT hash.

Silver Ticket — forging service tickets without contacting the KDC.

All require access to an AD environment as a domain user or administrator.

Examples

  • Rubeus for Kerberoasting and ticket manipulation
  • Golden Ticket attack with Mimikatz kerberos::golden

Notes

  • Encompasses Kerberoasting, Golden/Silver Ticket as sub-techniques.
tags
kerberos active directory ticket credential
◳Composite

Threats

used by 3

Threats that use it. Select one to open its page.

Defenses

countered by 4

How it is countered. Select one to open its page.