Abuses an Active Directory Kerberos delegation path to act as a domain user when accessing a configured service. Unconstrained delegation relies on a user's forwarded TGT reaching a delegated service; classic constrained delegation and resource-based constrained delegation use S4U extensions to request service tickets for a permitted downstream SPN. These paths have different account, delegation-configuration, ticket, and KDC-policy prerequisites. Access remains limited by the impersonated user's authorization on the target service.
Check before starting: RESTRICTED_ACCESS_BLUR_MARKER
Variant:
Full outcome coverage
ntlmrelayx · Relay NTLM to LDAP to add a computer account
Relay NTLM to LDAP to add a computer account
powershell
RESTRICTED_ACCESS_BLUR_MARKER
Version: RESTRICTED_ACCESS_BLUR_MARKER. Requirements: ALL(RESTRICTED_ACCESS_BLUR_MARKER)Documents all requested outcomes. This is a candidate, not proof of execution or compatibility.