Category S4U2Self

blog
3+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

S4U2Self blog

Filters

  • getST.py Impacket: S4U, RBCD and Constrained Delegation
    tools

    getST.py Impacket: S4U, RBCD and Constrained Delegation

    Impacket's getST.py guide for obtaining Kerberos Service Tickets with S4U2Self, S4U2Proxy, RBCD, and constrained delegation. Payload and errors for AD pentests.

    Discover more Discover more
  • RBCD Attack : Resource-Based Constrained Delegation PrivEsc
    windows

    RBCD Attack : Resource-Based Constrained Delegation PrivEsc

    RBCD leverages write access on msDS-AllowedToActOnBehalfOfOtherIdentity for privilege escalation on active directory. Drive with Impacket, Rubeus and NTLM relay.

    Discover more Discover more
  • Sapphire Ticket: Kerberos Stealth S4U2Self+U2U Ticket
    windows

    Sapphire Ticket: Kerberos Stealth S4U2Self+U2U Ticket

    Sapphire Ticket: The stealthiest Kerberos ticket. Combines S4U2Self + U2U for the authentic KDC PAC. Impacket impersonation guide, differences from Golden/Diamond, detection, and mitigation.

    Discover more Discover more