You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi, I wonder if it would make sense to add support for KDC Proxy (MS-KKDCP) to Rubeus. AFAIK, Remote Desktop Gateways and DirectAccess VPN servers are exposing Kerberos over HTTPS. This could theoretically open new and interesting scenarios like account enumeration and kerberoasting over the Internet. It should also be possible to deploy a standalone KDC Proxy Service for testing (thx @SteveSyfuhs).
The text was updated successfully, but these errors were encountered:
Hi, I wonder if it would make sense to add support for KDC Proxy (MS-KKDCP) to Rubeus. AFAIK, Remote Desktop Gateways and DirectAccess VPN servers are exposing Kerberos over HTTPS. This could theoretically open new and interesting scenarios like account enumeration and kerberoasting over the Internet. It should also be possible to deploy a standalone KDC Proxy Service for testing (thx @SteveSyfuhs).
The text was updated successfully, but these errors were encountered: