Hacking

ATAT was recently featured on HackingLoops.com. https://hackingloops.com/attack-team-automation-tool/ We appreciate the article and Hacking Loops sharing ATAT with their audience. However, there are some basic usage items that should be clarified.

Acquiring a golden ticket, by dumping the krbtgt AES256 hash, without compromising a domain admin account? Surely you jest. This cannot be possible, can it? Well, in most situations, no. Not unless there are some serious AD configuration issues.