Kerberos Authentication: Complete Guide for CISSP
Master Kerberos for the CISSP exam: the ticket based protocol, the AS, TGS and KDC, the six step flow, and why time synchronisation matters.
SERIES
The Kerberos Attack Chain
Kerberos is the CISSP topic that keeps paying: understand the protocol once and three attack classes fall into place behind it. This series walks the chain in order: how tickets actually work, how attackers forge the TGT (golden ticket), how they forge service tickets (silver ticket), and how they crack service account passwords offline (Kerberoasting). Read it in sequence and the exam questions start answering themselves.
Golden Ticket Attacks: Complete Guide for CISSP Candidates
Master Golden Ticket attacks for the CISSP exam: how attackers forge Kerberos TGTs with the krbtgt hash, why detection is hard, and the double reset fix.
Silver Ticket Attacks: Complete Guide for CISSP Candidates
Silver Ticket attacks for the CISSP exam: forging service tickets with a stolen service account hash, why the KDC bypass hides them, and how to defend.
Kerberoasting Attacks: Complete Guide for CISSP Candidates
Master Kerberoasting for the CISSP exam: how any domain user extracts service tickets, cracks service account passwords offline, and how to stop it.