Skip to content

Commit 520e7ee

Browse files
authored
Update Kerberos Authentication documentation
1 parent bcb0637 commit 520e7ee

1 file changed

Lines changed: 2 additions & 15 deletions

File tree

src/windows-hardening/active-directory-methodology/kerberos-authentication.md

Lines changed: 2 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -2,19 +2,6 @@
22

33
{{#include ../../banners/hacktricks-training.md}}
44

5-
Kerberos is time-sensitive. A typical default clock skew tolerance is 5 minutes. If your attacking host clock drifts beyond this window, pre-auth and service requests will fail with KRB_AP_ERR_SKEW or similar errors. Always sync your time with the DC before Kerberos operations:
5+
**Check the amazing post from:** [**https://www.tarlogic.com/en/blog/how-kerberos-works/**](https://www.tarlogic.com/en/blog/how-kerberos-works/)
66

7-
```bash
8-
sudo ntpdate <dc.fqdn>
9-
```
10-
11-
For a deep dive on protocol flow and abuse:
12-
13-
**Check the amazing post from:** [https://www.tarlogic.com/en/blog/how-kerberos-works/](https://www.tarlogic.com/en/blog/how-kerberos-works/)
14-
15-
## References
16-
17-
- [How Kerberos Works – Tarlogic](https://www.tarlogic.com/en/blog/how-kerberos-works/)
18-
- [HTB Sendai – 0xdf (operational notes on clock skew)](https://0xdf.gitlab.io/2025/08/28/htb-sendai.html)
19-
20-
{{#include ../../banners/hacktricks-training.md}}
7+
{{#include ../../banners/hacktricks-training.md}}

0 commit comments

Comments
 (0)