Links for UCS Kerberos Pres

links.md

Authentication

https://znanium.com/catalog/document?id=140493

NTLM RELAY

https://en.hackndo.com/ntlm-relay/

https://xakep.ru/2023/04/07/ntlm-relay-guide/

https://xakep.ru/2023/04/11/ntlm-relay-guide-2/

Kerberos

https://ardent101.github.io/posts/kerberos_theory/

https://ardent101.github.io/posts/kerberos_general_attacks/

https://www.chudamax.com/posts/kerberos-102-overview/

https://www.youtube.com/watch?v=qZPvgoUzCdI

https://www.ozon.ru/search/?deny_category_prediction=true&from_global=true&text=Active+Directory+%D0%B3%D0%BB%D0%B0%D0%B7%D0%B0%D0%BC%D0%B8+%D1%85%D0%B0%D0%BA%D0%B5%D1%80%D0%B0&product_id=325247592

Enum

https://github.com/ropnop/kerbrute

https://github.com/attackdebris/kerberos_enum_userlists

AS-REQ Roasting

https://github.com/lgandx/PCredz

https://blog.improsec.com/tech-blog/asreqroast-from-mitm-to-hash

AS-REP Roasting

https://www.ired.team/offensive-security-experiments/active-directory-kerberos-abuse/as-rep-roasting-using-rubeus-and-hashcat

https://blog.netwrix.com/2022/11/03/cracking_ad_password_with_as_rep_roasting/

https://habr.com/ru/articles/493478/

https://github.com/Bdenneu/CVE-2022-33679

https://github.com/skelsec/minikerberos/blob/master/minikerberos/examples/CVE_2022_33679.py

Kerberoasting

https://habr.com/ru/articles/650889/

https://www.securitylab.ru/analytics/496049.php

https://habr.com/ru/articles/697820/

https://ardent101.github.io/posts/kerberos_general_attacks/#kerberoasting

PAC Generation

https://habr.com/ru/companies/rvision/articles/686784/

https://xakep.ru/2020/04/15/windows-ad-persistence/

https://book.hacktricks.xyz/windows-hardening/active-directory-methodology/diamond-ticket

https://www.thehacker.recipes/ad/movement/kerberos/forged-tickets/sapphire

https://github.com/fortra/impacket/blob/master/examples/ticketer.py