Active Directory Kerberos Bronze Bit Attack (CVE-2020-17049) Explained
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
PAC
Active Directory 
Active Directory sAMAccountName Spoofing: noPac (CVE-2021-42278 / CVE-2021-42287)
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory Silver Ticket Attacks: Forging Kerberos Service Tickets
How attackers forge Kerberos TGS service tickets using a service account hash, and how blue teams detect and prevent it.
Active Directory Inside Kerberos: A Deep Dive into the Protocol Internals
A practical breakdown of Kerberos internals: AS-REQ, TGS-REQ, the PAC, and why RC4 vs AES etypes matter for attackers and defenders.