Curated security research, vulnerabilities, advisories and tools for practitioners.

#kerberos

Security coverage tagged kerberos.

1.

Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover

research | 2026-08-05 22:35 | semperis.com | original ↗ | #active-directory | #denial-of-service | #privilege-escalation

2.

A user account restriction (for example, a time-of-day restriction) is preventing you from logging on. For assistance, contact your system administrator or technical support.

research | 2026-06-27 07:39 | projectblack.io | original ↗ | #active-directory | #kerberos | #windows-security

3.

RC4 and AD Migration: Uncover the Break Scenarios Hiding in Your Source Domain

blog | 2026-05-29 17:20 | semperis.com | original ↗ | #active-directory | #kerberos | #windows-security

4.

The Gold Mine Red Teamers Never Touch

blog | 2026-05-22 00:00 | abdulmhsblog.com | original ↗ | #kerberos | #windows-security | #ntlm

5.

Dissecting Impacket for Good and Bad

blog | 2026-05-10 00:00 | abdulmhsblog.com | original ↗ | #active-directory | #kerberos | #smb

6.

How to Audit Your Environment for RC4 Encryption

blog | 2026-03-31 00:40 | semperis.com | original ↗ | #remediation | #active-directory | #kerberos

7.

When Is WinRM Over HTTP Secure?

blog | 2026-03-17 22:57 | semperis.com | original ↗ | #active-directory | #kerberos | #windows-security

8.

Exploiting Ghost SPNs and Kerberos Reflection for SMB Server Privilege Elevation

blog | 2025-10-29 15:16 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #kerberos

9.

Golden Ticket Attack Explained

blog | 2025-02-02 22:04 | semperis.com | original ↗ | #active-directory | #credential-theft | #privilege-escalation

10.

How to Defend Against Silver Ticket Attacks

blog | 2025-02-02 22:00 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #kerberos

11.

Unconstrained Delegation Explained

blog | 2025-01-26 14:28 | semperis.com | original ↗ | #active-directory | #kerberos | #detection

12.

AS-REP Roasting Explained

blog | 2025-01-26 01:50 | semperis.com | original ↗ | #active-directory | #credential-security | #kerberos

13.

Password Spraying Detection in Active Directory

blog | 2024-09-18 06:58 | semperis.com | original ↗ | #active-directory | #credential-security | #kerberos

14.

How to Defend Against an Overpass the Hash Attack

blog | 2024-02-09 01:38 | semperis.com | original ↗ | #active-directory | #credential-theft | #kerberos

15.

Python ❤️ SSPI: Teaching Impacket to Respect Windows SSO

research | 2024-01-11 13:08 | swarm.ptsecurity.com | original ↗ | #kerberos | #red-team | #impacket

16.

How to Defend Against a Pass the Ticket Attack: AD Security 101

blog | 2024-01-11 11:40 | semperis.com | original ↗ | #active-directory | #kerberos | #defense

17.

How to Defend Against Golden Ticket Attacks: AD Security 101

blog | 2024-01-04 22:43 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #kerberos

18.

How to Protect Active Directory Against Kerberoasting: AD Security 101

blog | 2023-08-25 22:16 | semperis.com | original ↗ | #active-directory | #credential-theft | #kerberos

19.

Resource-Based Constrained Delegation: AD Security 101

vulnerability | 2023-06-23 15:14 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #kerberos

20.

Transitive Trust and Breaking Trust Transitivity: AD Security 101

blog | 2023-03-14 13:00 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #kerberos

21.

New Attack Paths? AS Requested Service Tickets

blog | 2022-09-27 15:46 | semperis.com | original ↗ | #active-directory | #kerberos | #detection

22.

A Diamond Ticket in the Ruff

blog | 2022-07-05 16:21 | semperis.com | original ↗ | #active-directory | #kerberos | #detection

23.

SPN-jacking: An Edge Case in WriteSPN Abuse

blog | 2022-02-10 08:00 | semperis.com | original ↗ | #active-directory | #kerberos | #bloodhound

24.

Unconstrained Delegation in Active Directory

blog | 2022-01-07 18:38 | semperis.com | original ↗ | #active-directory | #kerberos | #hardening

25.

Golden Ticket Attacks on Active Directory

blog | 2021-11-24 21:03 | semperis.com | original ↗ | #active-directory | #kerberos | #defense

26.

Kerberoasting without SPNs

research | 2020-08-19 14:26 | swarm.ptsecurity.com | original ↗ | #pentesting | #active-directory | #kerberos

27.

Kerberos at the Company Party

blog | 2018-03-12 19:00 | semperis.com | original ↗ | #active-directory | #identity-security | #kerberos

28.

Vulnerability in Kerberos Allows Elevation of Privilege

vulnerability | 2014-11-19 19:16 | CVE-2014-6324 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #kerberos

29.

Azure Active Directory vs. Active Directory Domain Services

blog | 2013-12-17 15:26 | semperis.com | original ↗ | #cloud | #active-directory | #kerberos

30.

So why does Active Directory Disaster Recovery matter?

blog | 2013-12-15 15:46 | semperis.com | original ↗ | #active-directory | #kerberos | #authentication