← All Lessons
Premium
TechniqueActive Directory
Golden Ticket Forgery
A Golden Ticket is a Kerberos TGT forged with the krbtgt account's password hash, letting an attacker mint valid tickets for any identity at will. This lesson explains why the forgery is trusted, what the attacker gains, why it is such durable persistence, and how to communicate the risk in interviews, reports, and stakeholder conversations.
Sign in or upgrade to unlock the full premium library.
What you'll learn
- krbtgt account
- Golden Ticket
- PAC (Privilege Attribute Certificate)
- Domain SID
- Pass-the-Ticket
- Double krbtgt reset
What premium includes
- All 68 lessons: AD techniques, professional skills, each with interview answers and study kits
- Complete study kit for every lesson: quizzes, flashcards, and briefs
- Every learning track with full structured progression
- All 12 attack paths: full compromise walkthroughs for interviews and reports
- New lessons and attack paths added regularly
