Abusing Unconstrained Delegation

Abusing unconstrained delegation exploits systems configured to store forwarded TGTs from any authenticating user, allowing an attacker who compromises that system to impersonate anyone who connects to it. This lesson explains why unconstrained delegation creates risk, what preconditions matter, what the attacker gains, and how to communicate the risk clearly in interviews, reports, and stakeholder conversations.

View pricing Sign in

What you'll learn

TGT forwarding
Unconstrained means unrestricted
TrustedForDelegation flag
Authentication coercion as an amplifier
DC machine account TGT → DCSync
Distinction from constrained delegation

What premium includes

All 54 lessons: AD techniques, professional skills, each with interview answers and study kits
Complete study kit for every lesson: quizzes, flashcards, and briefs
Every learning track with full structured progression
All 12 attack paths: full compromise walkthroughs for interviews and reports
New lessons and attack paths added regularly

Abusing Unconstrained Delegation

What you'll learn

What premium includes

Continue with free content