Status
ISOLATED LAB
Phase
03_INITIAL_ACCESS
Egress
BLOCKED
?
Create Snapshot
Resume Session
APPRENTICESHIP // W5
Identity & Kerberos
Understand how Kerberos actually works before you attack it.
Set Current
Objectives
01
Create service accounts with SPNs (bad and gMSA versions).
02
Inspect TGT/TGS with klist and Wireshark on LINUX01.
03
Enable AES-only encryption on newly created accounts.
Hosts in play
DC01.LAB
WIN01.LAB
Checklist
Regular svc_sql account with SPN registered (deliberately weak).
gMSA counterpart created and installed on FS01.
Captured a Kerberos exchange and annotated it in the journal.
Snapshot: kerberos-baseline.