← All Lessons
Premium
TechniqueActive Directory
Pass-the-Ticket
Pass-the-Ticket is a lateral movement technique that uses stolen Kerberos ticket material, specifically TGTs or TGS tickets extracted from memory, to authenticate as another user without knowing their password. This lesson explains what ticket material is reused, why the technique works, how it differs from Pass the Hash and ticket forgery, and how to communicate the risk clearly in interviews, reports, and stakeholder conversations.
Sign in or upgrade to unlock the full premium library.
What you'll learn
- Tickets are bearer credentials
- TGT versus TGS reuse
- Ticket lifetime matters
- Distinction from ticket forgery
- Distinction from Pass the Hash
- Kerberos-only environments
What premium includes
- All 68 lessons: AD techniques, professional skills, each with interview answers and study kits
- Complete study kit for every lesson: quizzes, flashcards, and briefs
- Every learning track with full structured progression
- All 12 attack paths: full compromise walkthroughs for interviews and reports
- New lessons and attack paths added regularly
