w0rk3r's Windows Hacking Library

I’ve Got a Golden Twinkle in My Eye

The Kerberos Ticket Granting Ticket (KRBTGT) account is one of the most important accounts in a Windows Active Directory (AD) domain. Once the KRBTGT account has been exposed to an attacker this can allow them to conduct the Golden Ticket (GT) attack, which can grant them persistence, unfettered access, and may allow for privilege escalation in AD. This talk will stress the importance of the KRBTGT account and why it is often a high value target (HVT) for attackers. A detailed examination of the GT attack and defence techniques will be demonstrated.

https://www.youtube.com/watch?v=ABd0dm8MbDo

@WindowsHackingLibrary

YouTube

I’ve Got a Golden Twinkle in My Eye

SANS PenTest HackFest 2022

Speakers: Andrew Schwartz, Practice Lead, TrustedSec & Charlie Clark, Security Researcher, Semperis

The Kerberos Ticket Granting Ticket (KRBTGT) account is one of the most important accounts in a Windows Active Directory (AD)…

www.tgoop.com/windowshackinglibrary/602

3.7K viewsJonhnathan Jonhnathan Jonhnathan, edited  Mar 15, 2023 at 11:12

I’ve Got a Golden Twinkle in My Eye

The Kerberos Ticket Granting Ticket (KRBTGT) account is one of the most important accounts in a Windows Active Directory (AD) domain. Once the KRBTGT account has been exposed to an attacker this can allow them to conduct the Golden Ticket (GT) attack, which can grant them persistence, unfettered access, and may allow for privilege escalation in AD. This talk will stress the importance of the KRBTGT account and why it is often a high value target (HVT) for attackers. A detailed examination of the GT attack and defence techniques will be demonstrated.

https://www.youtube.com/watch?v=ABd0dm8MbDo

@WindowsHackingLibrary

BY w0rk3r's Windows Hacking Library