# Kerberoasting

DevFeed: [Kerberoasting](<https://devfeed.tech/articles/kerberoasting-29092.md>)

Original publisher: [Read original article](<https://blog.cryptographyengineering.com/2025/09/10/kerberoasting/>)

Author: Matthew Green

Published: 2025-09-10T12:00:00Z

Content type: opinion

Language: en

Sources: [Matthew Green](<https://devfeed.tech/sources/matthew-green.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [active directory](<https://devfeed.tech/topics/active-directory.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [ransomware](<https://devfeed.tech/topics/ransomware.md>), [Cybercrime](<https://devfeed.tech/topics/cybercrime.md>)

Tags: [active-directory](<https://devfeed.tech/tags/active-directory.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [computer](<https://devfeed.tech/tags/computer.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [passwords](<https://devfeed.tech/tags/passwords.md>), [ransomware](<https://devfeed.tech/tags/ransomware.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [windows](<https://devfeed.tech/tags/windows.md>)

## AI overview

This article explains Kerberoasting, a long-standing attack against environments using Microsoft Active Directory. It describes how the technique relates to service accounts, centralized authentication, and RC4, and connects it to the May 2024 ransomware attack on Ascension Health based on a letter from Senator Wyden to Microsoft.

## Source excerpt

I learn about cryptographic vulnerabilities all the time, and they generally fill me with some combination of jealousy ("oh, why didn't I think of that") or else they impress me with the brilliance of their inventors. But there's also another class of vulnerabilities: these are the ones that can't possibly exist in important production software, ... Continue reading Kerberoasting ->