Silver Ticket in Active Directory
To make it simple: Silver tickets are forged Service tickets. Service tickets are tickets that allow users to access services.
Tag: #windows
Golden Ticket in Active Directory
Explanation When a user authenticates to a service in an Active Directory network, Kerberos will give them a ticket which
Null Authentication – Active Directory Enumeration
Null Authentication Null Authentication: The client connects to a server (SMB, RPC, etc) without providing any credentials. The server will
Continue reading…Null Authentication – Active Directory Enumeration
Bypass UAC: Windows Privilege Escalation
What is UAC? User Account Control is a security feature in Windows that protects the machine from unauthorized code. Its
Dumping Hashes in Active Directory (Mimikatz)
Mimikatz is a tool that is primarily used for retrieving sensitive information from Windows operating systems. Its commonly used for
Continue reading…Dumping Hashes in Active Directory (Mimikatz)
SeImpersonatePrivilege
What is it? SeImpersonatePrivilege is a Windows security privilege that allows a user or process to impersonate another user or
AlwaysInstallElevated
What is AlwaysInstallElevated? “AlwaysInstallElevated” is a Windows registry setting that allows non-administrative users to install software with elevated privileges. This
Kerberoasting – Active Directory
Kerberoasting is a method used to extract password hashes of Active Directory service accounts, which are often used for running
Abusing SeBackupPrivilege to get hashes
What is SeBackupPrivilege SeBackupPrivilege is a Windows user privilege that grants a user the ability to bypass file and directory
Scheduled Tasks – Windows PrivEsc
Scheduled tasks are automated tasks that run on a predefined schedule or in response to a specific event on a
