Golden Ticket Forgery

A Golden Ticket is a Kerberos TGT forged with the krbtgt account's password hash, letting an attacker mint valid tickets for any identity at will. This lesson explains why the forgery is trusted, what the attacker gains, why it is such durable persistence, and how to communicate the risk in interviews, reports, and stakeholder conversations.

View pricing Sign in

What you'll learn

krbtgt account
Golden Ticket
PAC (Privilege Attribute Certificate)
Domain SID
Pass-the-Ticket
Double krbtgt reset

What premium includes

All 54 lessons: AD techniques, professional skills, each with interview answers and study kits
Complete study kit for every lesson: quizzes, flashcards, and briefs
Every learning track with full structured progression
All 12 attack paths: full compromise walkthroughs for interviews and reports
New lessons and attack paths added regularly

Continue with free content

Active Directory Structure
Identifying Privilege Paths with BloodHound
Writing Professional Security Reports