https://blog.omiilgo.com/tags/kerberos/ Recent content in Kerberos on Security Notes Hugo en-us Tue, 08 Aug 2023 11:00:00 +0800 https://blog.omiilgo.com/posts/des-in-active-directory-crypto/ Tue, 08 Aug 2023 11:00:00 +0800 https://blog.omiilgo.com/posts/des-in-active-directory-crypto/ Lab klist encryption types, supported-etype table, GPO ‘Configure encryption types allowed for Kerberos’ — inventory, not cracking. https://blog.omiilgo.com/posts/kerberos-ticket-times-and-checksums/ Tue, 14 Mar 2023 14:00:00 +0800 https://blog.omiilgo.com/posts/kerberos-ticket-times-and-checksums/ Lab klist dump, field-by-field decode of times and checksum types, clock-skew 401 — no ticket-forging steps. https://blog.omiilgo.com/posts/windows-delegation-edge-cases/ Mon, 17 May 2021 15:00:00 +0800 https://blog.omiilgo.com/posts/windows-delegation-edge-cases/ Lab klist/setspn dumps redacted, unconstrained vs constrained vs RBCD text diagrams — flags and ACLs, not an abuse chain. https://blog.omiilgo.com/posts/kerberos-constrained-delegation-map/ Tue, 17 Mar 2020 11:00:00 +0800 https://blog.omiilgo.com/posts/kerberos-constrained-delegation-map/ Lab klist and setspn dumps redacted, constrained-delegation allow-list map — no ticket forging, no S4U abuse.