Collaborate Disseminate
I know that in a domain enviroment there are two ways to authenticate users:
NTLM and Kerberos.
But, in a non-domain enviroment, what is exactly the protocol that takes place when trying to authenticate remotly?
Both NTLM a… Continue reading Local account authentication protocol
All material I can find is related to RC4-based Kerberos TGS tickets, since these are easier to crack to obtain the service account’s password.
However, I want to attempt to crack AES-based Kerberos TGS tickets using a short wordlist.
Lo… Continue reading How to crack AES-based Kerberos TGS tickets (Kerberoasting)?
A public website with an SSL certificate makes use of a certificate and CA in order to establish trust between the server and client.
How is the same thing typically implemented on private networks, with large numbers of short-lived hosts… Continue reading Certificates for autoscaling internal networks?
Working in a coporate environment, which uses Active Directory, I overheard someone making a comment stated the Kerberos protcol can be used to encrypt network traffic between Windows servers. Can this be possible with Kerber… Continue reading Can Kerberos encrypt network traffic between servers?
It’s amazing how many “Attacks on Kerberos” articles exist out there and almost none really explains the small details.
My guess is that usually they assume it’s basic knowledge and sometimes, they just don’t know enough.
Anyway, here ar… Continue reading Kerberos Attacks Questions
Here is my security protocol for the use of a service provided by server. It utilises a symmetric key:
Client requests to use a service
Server sends back nonce
Client sends back nonce encrypted with Alice’s key
Once server … Continue reading What are the flaws in this security protocol between client and server?
Understanding how Kerberos delegation works in Active Directory is key to keeping your systems secure.
The post Understanding Kerberos Delegation in Windows Server Active Directory appeared first on Petri.
Continue reading Understanding Kerberos Delegation in Windows Server Active Directory
In the blackhat talk by Gentikwiki on Mimikatz back in 2014,
he mentioned that you can pass the service ticket also, but i am unable to replicate it in a lab. It throws an access denied.
Passing the TGT works all good.
I read this article https://www.roguelynn.com/words/explain-like-im-5-kerberos/ and got a good understanding what are Kerberos authentication packets like.
But nobody mentions how the further packets look like after authoriz… Continue reading What is the packet structure in kerberos after authorization?
If a small company is expanding with various branches across the country, how would the kerberos centralized server be configured? Are the new users assigned new ticket granting servers or are they assigned to the already exi… Continue reading Kerberos Protocol Centralized Server