Active Directory Attacks: Kerberoasting, Pass-the-Hash and Golden Ticket
Learn the most common Active Directory attack techniques—Kerberoasting, Pass-the-Hash, Golden Ticket—and how to defend your Windows infrastructure.
Summary: A method for cracking passwords or encryption keys by systematically trying every possible combination. Online brute-force attacks target login forms, while offline brute-force attacks crack stolen hashes. Mitigation: MFA, account lockout, rate limiting, and strong passwords.
Sources & References
- [1] Microsoft - Active Directory Security Best Practices - Microsoft
- [2] MITRE ATT&CK - Enterprise Techniques - MITRE Corporation
- [3] BloodHound - Attack Path Analysis - SpecterOps
- [4] BSI - Absicherung von Active Directory - Bundesamt für Sicherheit in der Informationstechnik
Questions about this topic?
Our experts advise you free of charge and without obligation.
About the Author
M.Sc. IT-Sicherheit mit über 5 Jahren Erfahrung in offensiver Sicherheitsanalyse. Leitet die Durchführung von Penetrationstests mit Spezialisierung auf Web-Applikationen, Netzwerk-Infrastruktur, Reverse Engineering und Hardware-Sicherheit. Verantwortlich für mehrere Responsible Disclosures.
