13 pages

Credential Access

Getting authentication material out of the domain: roasting, replication, and reusing hashes, keys, tickets and certs.

Page Kind Tags Updated

Password Spraying

low-and-slow domain credential guessing

concept credential-access, initial-access 07 Sept

offline cracking of service (TGS) tickets

concept kerberos, tgs 07 Sept

AS-REP Roasting

cracking accounts with pre-auth disabled

concept kerberos, asrep 07 Sept

replicate any AD secret via MS-DRSR

concept active-directory, dcsync 07 Sept

concept lateral-movement, ntlm 07 Sept

concept kerberos, active-directory 07 Sept

Overpass the Hash

concept active-directory, kerberos 06 Sept

concept active-directory, pkinit 06 Sept

Shadow Credentials

msDS-KeyCredentialLink Abuse

concept active-directory, kerberos 07 Sept

PKINIT and UnPAC the Hash

concept active-directory, kerberos 13 Jun

masterkeys, browser creds, the domain backup key

concept credential-access, dpapi 07 Sept

unauthenticated computer-account roasting via MS-SNTP

concept kerberos, active-directory 07 Sept

Targeted roasting

ACL-driven Kerberoast / AS-REP, no-SPN, no-preauth

concept kerberos, active-directory 07 Sept

13 pages in this section