PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Kerberoasting without SPNs

swarm.ptsecurity.com | research | #pentesting | #active-directory | #kerberos | #methodology
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

How to Kerberoast without knowing any SPNs: by requesting service tickets for fabricated SPN strings that still map to target accounts, attackers can obtain tickets encrypted with the account key and crack them offline — useful when SPN enumeration is noisy or unavailable.
Published
Collected

Related coverage

vulnerability · horizon3.ai
From CVE-2022-33679 to Unauthenticated Kerberoasting
On September 13, 2022, a new Kerberos vulnerability was published on the Microsoft Security Response Center’s security site. It’s labeled as a Windows Kerberos…
research · portswigger.net
How I choose a security research topic
James Kettle on choosing security research topics: evaluate how quickly you can fail, chase what scares you, and know when to push on, using his race-conditions research as a case study.
research · portswigger.net
Hunting evasive vulnerabilities
James Kettle's Nullcon keynote explores evasive vulnerabilities from a decade of research — too advanced, too silly or well-masked to spot — extracting principles for finding overlooked flaws.
research · portswigger.net
How to turn security research into profit: a CL.0 case study
Strategies for turning security research into bounty profit, using the CL.0 desync class as a case study: assess competition, find gaps in released scanners, and act before a technique saturates.
research · hackenproof.com
How to Read Any Smart Contract Project Without Getting Lost
A methodology guide on reading unfamiliar smart contract projects without getting lost, aimed at security researchers and auditors facing large, complex codebases.
research · yokai.hakaisecurity.io
[EN] A Deep Dive into KeyTabExtractor Techniques
By: Lucas Hoffmann Revision: Thiago Bispo & Allan Kardec Technical Introduction Many modern corporations rely on Kerberos, a widely used network authentication protocol designed to validate identities and authorize access within corporate environments. Within this ecosystem, there are mechanisms that allow services to authenticate automatically, without human interaction, and one of the main ones is […]
Back