Collaborate Disseminate
As I understand it, when a client wants to authenticate to an application server using Kerberos it must first request a service ticket from the KDC (and possibly a ticket-granting-ticket if it does not already have one). For scenarios wher… Continue reading Can a Kerberos application server offer to proxy connections to the KDC?
I was researching a kerberoasting attack on the Active Directory domain. To create the stand, I used a Domain Controller on Windows Server 2016 and one client machine on Windows 10. SQL Server was installed on the Domain Controller which w… Continue reading Why do administrators create passwords vulnerable to kerberoasting?
When setting up a host (… or updating its keytab if it needs new entries), what’s the standard way to set up keytabs?
Looks like the MIT Kerberos docs themselves recommend using ktadmin on the host itself (… sadly, I can’t find the exa… Continue reading MIT Kerberos: getting keytabs onto hosts securely
I am doing some research for school about the Kerberos protocol and its vulnerabilities, especially the Pass the Ticket attack.
Related articles are always talking about Active Directory so I was wondering if the MIT version of Kerberos wa… Continue reading Is the MIT implementation of Kerberos protocol as vulnerable as the one used by Microsoft?
The tool Responder written in Python permits to listen on a specific network card requests and automatically poisoning victims the steal hash NTLMv1 and hash NTLMv2.
The attack Pass-The-Hash permits to connect to a service like SMB.
I am a… Continue reading Is it possible make a Pass-The-Hash attack with Responder?
As far as I know, in order to create a Golden Ticket, the attacker needs to obtain the krbtgt’s password’s hash, which is not a trivial task. My question is: is it possible to find the krbtgt’s password by getting a legitimate TGT (encrypt… Continue reading Kerberos – obtaining the krbtgt’s secret in order to perform Golden Ticket attack
If someone can implement the all the functionalities that Authorization server and Ticket Granting Server in one server, why not do it?
Continue reading Why Kerberos protocol defines two servers? [migrated]
Is it really stupid to consider migrating every Windows machine into a Linux OS (waybe Debian/Ubuntu/Mint) whatever Debian-based customized distro in order to minimize risks in a company that is heavily security-oriented?
Is there actually… Continue reading Migrating Windows to Linux pros and cons [closed]
I have a Synology NAS that I’m trying to access over NFS from a couple of systems running archlinux (a laptop and a server). I’d like to get NFSv4 id mapping working so that I don’t have to align the user ids between all these systems, and… Continue reading Kerberos tickets for service accounts and NFSv4 id mapping
I’m learning about how Kerberos and it’s common exploits work and I’m a little confused. In this video explaining the process we see that at one of the earlier points the user is provided with two packets, one of them being a TGT:
http://… Continue reading What exactly could we get as an attacker if Kerberos Pre-Authentication is disabled?