Open-source security tooling project
Appears in 1 story
Received pull request adding U2U support for the technique
A new Kerberos attack gives attackers a path from a single compromised account to full domain control, even when the target account has no service principal name (SPN) registered. Researchers at Sprocket Security published the technique on September 21, 2026, showing how constrained delegation can be abused in a case long considered impossible.
Updated 2 hours ago
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
