Active Directory Attacks: Kerberoasting, Golden Ticket
Learn the most common Active Directory attack techniques - Kerberoasting, Pass-the-Hash, Golden Ticket - and how to defend your Windows infrastructure.
Summary: A method for cracking passwords or encryption keys by systematically trying every possible combination. Online brute-force attacks target login forms, while offline brute-force attacks crack stolen hashes. Mitigation: MFA, account lockout, rate limiting, and strong passwords.
Sources & References
- [1] Microsoft - Active Directory Security Best Practices - Microsoft
- [2] MITRE ATT&CK - Enterprise Techniques - MITRE Corporation
- [3] BloodHound - Attack Path Analysis - SpecterOps
- [4] BSI - Absicherung von Active Directory - Bundesamt für Sicherheit in der Informationstechnik
Questions about this topic?
Our experts advise you free of charge and without obligation.
About the Author
M.Sc. in IT Security with more than 5 years of experience in offensive security analysis. Leads the delivery of penetration tests, specializing in web applications, network infrastructure, reverse engineering and hardware security. Responsible for several responsible disclosures.
