Workshop: Hands on Kerberos

In this workshop, you’ll get an overview of Kerberos based on a section straight from Red Siege’s Offense for Defense (O4D) course and another excerpt from the new Pen Testing: Beyond the Basics class.

We’ll cover what Kerberos is, and how to attack it. You’d work through a hands on lab exercise involving Kerberoasting (Tim’s baby), the silver ticket attack, and the golden ticket attack.

What You’ll Learn:

• What Kerberos is and the role it plays in authentication and authorization in Active Directory environments

• Kerberos ticket structure and how tickets are used

• How weaknesses in Microsoft Kerberos’s implementation can lead to password attacks against service accounts

• How to perform a Kerberoasting attack

• How to perform a Golden Ticket attack