PT0-003: CompTIA PenTest+Demo

By CompTIA · Question Mode

QuestionQ67

Vulnerability Discovery and Analysis

During a vulnerability assessment, a penetration tester discovers the following information:

  • The KRBTGT account has gone more than 1250 days without a password change.

Which of the following tools could an attacker use to exploit this vulnerability?

  • A Mimikatz
  • B John the Ripper
  • C Hashcat
  • D Hydra
Explanation

Mimikatz can be used in a Golden Ticket attack: possession of the KRBTGT account’s Kerberos key allows an attacker to forge Kerberos ticket-granting tickets. Keeping that password unchanged for a long period preserves the same key material and allows forged tickets based on it to remain viable until the KRBTGT password is reset.

Community Discussion

No comments yet. Be the first to start the discussion!