Active Directory
Premium
AD Delegation Attacks
Kerberos delegation lets services authenticate to other services on behalf of users. Unconstrained delegation captures TGTs from any authenticating user. Constrained delegation enables S4U2Self/Proxy abuse. RBCD is the modern variant and the basis for multiple GenericWrite-on-computers chains.
Members Only Content
This article is exclusively available to premium members of LazyHackers. Login or subscribe to read.