Quality Assurance & Testing
Exploiting Constrained Delegation Abuse
The skill exploits Kerberos Constrained Delegation misconfigurations in Active Directory by employing Impacket's findDelegation.py and getST.py or Rubeus/Kekeo on Windows to abuse S4U2Self and S4U2Proxy, enabling impersonation of privileged users. It is applied during authorized Active Directory penetration tests or red‑team engagements to facilitate lateral movement and privilege escalation after identifying an account trusted for constrained delegation.
- Publisher / source
- Cybersecurity Skills (Community)
- Upstream record
- mukul975/Anthropic-Cybersecurity-Skills
- Version
- Version 3
- Published
- Publication review
- Approved for publication
- Content fingerprint
3c6c084f899e5c028bb8f114c10c76e853eda6fd17ea690241b0d7a82e052862