---
id: 7454
title: "Domain Takeover via Kerberos Unconstrained Delegation"
source_domain: blog.sentry.security
source_url: "https://blog.sentry.security/domain-takeover-via-kerberos-unconstrained-delegation/"
published_at: "2025-05-23T14:29:10Z"
tags: ["active-directory", "kerberos", "red-team", "mitigation", "unconstrained-delegation", "domain-takeover", "tgt"]
phying_url: "https://phying.com/item/7454"
lang: en
---

# Domain Takeover via Kerberos Unconstrained Delegation

## Summary

How attackers abuse Active Directory unconstrained delegation: coercing a DC to authenticate to a compromised host captures its TGT, enabling DCSync, Golden Tickets and full domain takeover.

## Intelligence Metadata

- **Sources:** blog.sentry.security
- **Published:** 2025-05-23T14:29:10Z
- **Original:** https://blog.sentry.security/domain-takeover-via-kerberos-unconstrained-delegation/
- **Phying News:** https://phying.com/item/7454