Windows Kerberos ticket theft and exploitation on other platforms

#1

Post by erglkjahlkh » Mon, Jun 29, 2015, 6:44 PM UTC

Windows Kerberos ticket theft and exploitation on other platforms
mikkolehtisalo.wordpress.com

Re: Windows Kerberos ticket theft and exploitation on other platforms

#2

Post by dsp1234 » Mon, Jun 29, 2015, 11:19 PM UTC

How far does this get without "Meterpreter session with SYSTEM privileges".

If this is required for the exploit, then this seems like a case of being on the other side of the airtight hatch. [0][1]

[0] - http://blogs.msdn.com/b/oldnewthing/archive/2014/07/04/10539...

[1] - http://blogs.msdn.com/b/oldnewthing/archive/2007/08/07/42687...

Re: Windows Kerberos ticket theft and exploitation on other platforms

#3

Post by y0ghur7_xxx » Tue, Jun 30, 2015, 4:47 PM UTC

dsp1234 wrote: post #2

How far does this get without "Meterpreter session with SYSTEM privileges". If this is required for the exploit, then this seems like a case of being on the other side of the airtight hatch. [0][1] [0] - http://blogs.msdn.com/b/oldnewthing/archive/2014/07/04/10539... [1] - http://blogs.msdn.com/b/oldnewthing/archive/2007/08/07/42687...

> If this is required for the exploit

there is no exploit as far as i can see. the article just describes how to use a kerberos ticket generated on a machine on another machine.