---
id: 5773
title: "Exploiting Ghost SPNs and Kerberos Reflection for SMB Server Privilege Elevation"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/exploiting-ghost-spns-and-kerberos-reflection-for-smb-server-privilege-elevation/"
published_at: "2025-10-29T15:16:24Z"
tags: ["active-directory", "privilege-escalation", "kerberos", "smb", "spn", "cve-2025-58726"]
phying_url: "https://phying.com/item/5773"
lang: en
---

# Exploiting Ghost SPNs and Kerberos Reflection for SMB Server Privilege Elevation

## Summary

Ghost SPNs and Kerberos reflection still yield remote SYSTEM access on SMB servers even after the CVE-2025-33073 fix — research behind CVE-2025-58726, and why SMB signing remains critical.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2025-10-29T15:16:24Z
- **Original:** https://www.semperis.com/blog/exploiting-ghost-spns-and-kerberos-reflection-for-smb-server-privilege-elevation/
- **Phying News:** https://phying.com/item/5773