Kerberos

Kerberos. Explained. Abused.

Why Kerberos Exists? Before Kerberos, network authentication meant sending a password or weak NTLM hash. Anyone within the same network segement could sniff this and impersonate the user. Kerberos aims to fix this by letting clients prove who the are without exposing the password via encrypted, time-limited tickets from a trusted authority. I’m going to sleep and shall continue this tomorrow :D