---
id: 5810
title: "Golden Ticket Attack Explained"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/golden-ticket-attack-explained/"
published_at: "2025-02-02T22:04:25Z"
tags: ["active-directory", "credential-theft", "privilege-escalation", "kerberos", "golden-ticket", "krbtgt"]
phying_url: "https://phying.com/item/5810"
lang: en
---

# Golden Ticket Attack Explained

## Summary

A Golden Ticket attack forges Kerberos TGTs using the KRBTGT hash, granting unrestricted domain access as any user. The post details creation in Cobalt Strike and defenses like tiered administration.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2025-02-02T22:04:25Z
- **Original:** https://www.semperis.com/blog/golden-ticket-attack-explained/
- **Phying News:** https://phying.com/item/5810