A common configuration error in Active Directory is assigning Service Principal Names (SPNs) to ordinary user accounts. This mistake can create an overlooked path for Kerberoasting attacks, allowing adversaries to obtain credentials without needing privileged access or causing account lockouts. Kerberoasting typically targets Active Directory service accounts that hold SPNs, which Kerberos uses to identify […]

The post Active Directory SPN Misconfigurations Enable Kerberoasting Without Account Lockouts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

Source: gbHackers
Source Link: https://gbhackers.com/active-directory-spn-misconfigurations-enable-kerberoasting/