Kerberos S4U Delegation Abuse through Active Directory ACE Misconfigurations

Active Directory security, focusing on Kerberos delegation and Resource-Based Constrained Delegation (RBCD) vulnerabilities. Explore AD architecture, LDAP, DACLs, ACEs, and delegation types, including S4U2Self and S4U2Proxy. Understand RBCD misconfigurations involving msDS-AllowedToActOnBehalfOfOtherIdentity and their potential security impact. Through live demonstrations, follow the attack lifecycle from enumeration to Pass-the-Ticket techniques in a controlled environment. Learn detection and auditing using Windows Event ID's, along with practical hardening strategies to strengthen Active Directory security