Kerberoasting
Active Directory
Post Exploitation: Attacks
Overview
The attacker uses a known username and password of a user on a domain.
A typical Kerberos workflow is:
Once a user logs into a domain-joined system, they get a TGT (ticket-granting ticket).
Then, they'll use that TGT to request a TGS (ticket-gra...
