Live Breaking News & Updates on Windows Kerberos

Stay updated with breaking news from Windows kerberos. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.

New Attack Paths? AS Requested Service Tickets

While helping Andrew Schwartz with his Kerberos FAST post (which has more information about what FAST is and how it works, so have a read), I noticed something interesting. AS-REQs for machine accounts are unarmored. This is described by Microsoft here: Kerberos armoring uses a ticket-granting ticket (TGT) for the device to protect authentication service . The post New Attack Paths? AS Requested Service Tickets appeared first on Semperis. ....

Kevin Robertson , Arseniy Sharoglazov , Jake Karnes , Andrew Schwartz , Charlie Clark , Service Tickets , Security Bloggers Network , Service Name , Semperis Research , Ops Experience , Public Key Cryptography , Initial Authentication , Kerberos Flexible Authentication Secure Tunneling , Tim Medin , Active Directory , Windows Kerberos , Dirk Jan Mollema , Will Schroeder , Ticket Checksum , New Attack ,