Why Kerberos ? ( Port 88 )

Without Kerberos, every service might need to know your username and password, that would be a mess.

If you change your password, every service would need to update it. If your account is disabled, every service would need to know.

Instead, Kerberos creates a central authentication system called the KDC (Key Distribution Center).

• How ticketing works
• Ticket Encryption

So basically Users ( Authenticates ) → KDC → TGT ( To User ) → USER ( With TGT ) → KDC → TGS ( To User ) → User ( With TGS ) → Service

1. TGT request: Authentication Service (AS)
2. TGS request: Ticket-Granting Service (TGS)
3. Service request: Application Request (AP)

• Authentication Service ( AS )
• Ticket Granting Service ( TGS )

Now we will Learn about few Active Directory Attacks

Attacks