The Golden Ticket: How One Stolen Key Opens Every Door in Active Directory
In Willy Wonka’s factory, a golden ticket got you through the gates, no questions asked. In Active Directory, a forged Kerberos ticket signed with the krbtgt key does the same: any user, any group, for as long as the forger likes. Here is how it works and how to keep the key out of reach.