w0rk3r's Windows Hacking Library

Exploit samAccountName spoofing with Kerberos https://cloudbrothers.info/en/exploit-kerberos-samaccountname-spoofing @WindowsHackingLibrary

Delegate to KRBTGT service https://skyblue.team/posts/delegate-krbtgt @WindowsHackingLibrary

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings). https://github.com/Dec0ne/KrbRelayUp @WindowsHackingLibrary

I’ve Got a Golden Twinkle in My Eye The Kerberos Ticket Granting Ticket (KRBTGT) account is one of the most important accounts in a Windows Active Directory (AD) domain. Once the KRBTGT account has been exposed to an attacker this can allow them to conduct the Golden Ticket (GT) attack, which can grant them persistence, unfettered access, and may allow for privilege escalation in AD. This talk will stress the importance of the KRBTGT account and why it is often a high value target (HVT) for attackers. A detailed examination of the GT attack and defence techniques will be demonstrated. https://www.youtube.com/watch?v=ABd0dm8MbDo @WindowsHackingLibrary