9 pages
Credential Access
Getting authentication material out of the domain: roasting, replication, and reusing hashes, keys, tickets and certs.
Page Kind Tags Updated
Kerberoasting
offline cracking of service (TGS) tickets
AS-REP Roasting
cracking accounts with pre-auth disabled
DCSync
replicate any AD secret via MS-DRSR
Pass the Hash
PtH
Pass the Key
PtK
Overpass the Hash
Pass the Cert
PKINIT
Shadow Credentials
msDS-KeyCredentialLink Abuse
PKINIT and UnPAC the Hash
9 pages in this section