---
id: 5812
title: "Unconstrained Delegation Explained"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/unconstrained-delegation-explained/"
published_at: "2025-01-26T14:28:24Z"
tags: ["active-directory", "kerberos", "detection", "lateral-movement", "unconstrained-delegation", "rubeus"]
phying_url: "https://phying.com/item/5812"
lang: en
---

# Unconstrained Delegation Explained

## Summary

Unconstrained delegation lets a service impersonate users across the domain; attackers hunt such servers, capture Kerberos TGTs with Rubeus, and move laterally. Mechanics and remediation covered.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2025-01-26T14:28:24Z
- **Original:** https://www.semperis.com/blog/unconstrained-delegation-explained/
- **Phying News:** https://phying.com/item/5812