# Smart Card

Published articles for Smart Card.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Attacking Smart Card Based Active Directory Networks

DevFeed: [Attacking Smart Card Based Active Directory Networks](<https://devfeed.tech/articles/attacking-smart-card-based-active-directory-networks-32631.md>)

Original publisher: [Read original article](<https://ethicalchaos.dev/2020/10/04/attacking-smart-card-based-active-directory-networks/>)

Author: CCob

Published: 2020-10-04T19:31:42Z

Content type: tutorial

Language: en

Sources: [Ethical Chaos](<https://devfeed.tech/sources/ethical-chaos.md>)

Topics: [active directory](<https://devfeed.tech/topics/active-directory.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [certificates](<https://devfeed.tech/topics/certificates.md>), [private key](<https://devfeed.tech/topics/private-key.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [kerberos](<https://devfeed.tech/topics/kerberos.md>), [public key](<https://devfeed.tech/topics/public-key.md>)

Tags: [active-directory](<https://devfeed.tech/tags/active-directory.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [certificates](<https://devfeed.tech/tags/certificates.md>), [cobalt-strike](<https://devfeed.tech/tags/cobalt-strike.md>), [hooking](<https://devfeed.tech/tags/hooking.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [pin](<https://devfeed.tech/tags/pin.md>), [pinswipe](<https://devfeed.tech/tags/pinswipe.md>), [pki](<https://devfeed.tech/tags/pki.md>), [private-key](<https://devfeed.tech/tags/private-key.md>), [public-key](<https://devfeed.tech/tags/public-key.md>), [rubeus](<https://devfeed.tech/tags/rubeus.md>), [smart-card](<https://devfeed.tech/tags/smart-card.md>), [swipe](<https://devfeed.tech/tags/swipe.md>), [weaponize](<https://devfeed.tech/tags/weaponize.md>)

### AI overview

This article examines attacks against smart-card-enforced Active Directory networks. It explains that a physical smart card is not necessarily required for smart-card logon when the corresponding private key is available, describes certificate requirements and policy-related certificate abuse, and introduces PKINIT as public-key support for Kerberos pre-authentication.

### Source excerpt

Introduction Recently I was involved in an engagement where I was attacking smart card based Active Directory networks. The fact is though, you don't need a physical smart card at all to authenticate to Active Directory that enforces smart card logon. The attributes of the certificate determine if it can be used for smart card [...] The post Attacking Smart Card Based Active Directory Networks appeared first on Ethical Chaos.