<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Kerberos on Locodigital</title><link>https://locodigital.com.br/en/tags/kerberos/</link><description>Recent content in Kerberos on Locodigital</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Thu, 24 Sep 2026 09:00:00 -0300</lastBuildDate><atom:link href="https://locodigital.com.br/en/tags/kerberos/index.xml" rel="self" type="application/rss+xml"/><item><title>What Is Kerberoasting? The Attack That Exploits Active Directory Service Accounts</title><link>https://locodigital.com.br/en/technology/kerberoasting-how-it-works-active-directory-attack/</link><pubDate>Thu, 24 Sep 2026 09:00:00 -0300</pubDate><guid>https://locodigital.com.br/en/technology/kerberoasting-how-it-works-active-directory-attack/</guid><description>&lt;p&gt;Imagine a new employee with basic domain access being able to extract the database server password without triggering a single alert — using nothing but native Windows tooling. That's exactly what Kerberoasting makes possible. It's not a sophisticated zero-day: it's a feature of the Kerberos protocol itself, and any domain account can start the attack.&lt;/p&gt;
&lt;h2&gt;How Kerberos Works (in 60 Seconds)&lt;/h2&gt;
&lt;p&gt;Kerberos is the standard authentication protocol in Windows environments with Active Directory. The basic flow has three steps:&lt;/p&gt;</description></item></channel></rss>