{"id":477358,"date":"2023-08-09T09:11:34","date_gmt":"2023-08-09T09:11:34","guid":{"rendered":""},"modified":"2023-09-05T11:14:33","modified_gmt":"2023-09-05T11:14:33","slug":"golden-ticket-attack","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/jp\/wiki\/golden-ticket-attack\/","title":{"rendered":"\u30b4\u30fc\u30eb\u30c7\u30f3\u30c1\u30b1\u30c3\u30c8\u653b\u6483"},"content":{"rendered":"

\u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306f\u3001Microsoft \u306e Active Directory \u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u306e\u5f31\u70b9\u3092\u60aa\u7528\u3059\u308b\u9ad8\u5ea6\u306a\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u3067\u3059\u3002\u653b\u6483\u8005\u306f\u3001Windows \u30c9\u30e1\u30a4\u30f3\u5185\u3067\u306e\u8a8d\u8a3c\u306b\u4f7f\u7528\u3055\u308c\u308b Kerberos \u30c1\u30b1\u30c3\u30c8\u3092\u507d\u9020\u3057\u3066\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3078\u306e\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3092\u8a31\u53ef\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u3053\u306e\u653b\u6483\u306f\u30012014 \u5e74\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u8005\u306e Benjamin Delpy \u306b\u3088\u3063\u3066\u521d\u3081\u3066\u767a\u898b\u3055\u308c\u3001\u516c\u8868\u3055\u308c\u307e\u3057\u305f\u3002\u305d\u308c\u4ee5\u6765\u3001\u4e16\u754c\u4e2d\u306e IT \u7ba1\u7406\u8005\u3084\u7d44\u7e54\u306b\u3068\u3063\u3066\u5927\u304d\u306a\u61f8\u5ff5\u4e8b\u9805\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n

\u30b4\u30fc\u30eb\u30c7\u30f3\u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306e\u8d77\u6e90\u306e\u6b74\u53f2<\/h2>\n

\u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306e\u8d77\u6e90\u306f\u3001Microsoft \u306e Kerberos \u5b9f\u88c5\u306b\u304a\u3051\u308b\u8106\u5f31\u6027\u306e\u767a\u898b\u306b\u307e\u3067\u9061\u308a\u307e\u3059\u3002Kerberos \u8a8d\u8a3c\u30d7\u30ed\u30c8\u30b3\u30eb\u306f Active Directory \u306e\u30b3\u30a2 \u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3067\u3042\u308a\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30ea\u30bd\u30fc\u30b9\u3092\u8a8d\u8a3c\u3057\u3066\u30a2\u30af\u30bb\u30b9\u3059\u308b\u305f\u3081\u306e\u5b89\u5168\u306a\u65b9\u6cd5\u3092\u63d0\u4f9b\u3057\u307e\u3059\u30022014 \u5e74\u3001\u300cMimikatz\u300d\u30c4\u30fc\u30eb\u306e\u4f5c\u6210\u8005\u3067\u3042\u308b Benjamin Delpy \u306f\u3001Kerberos \u30c1\u30b1\u30c3\u30c8\u306e\u767a\u884c\u3068\u691c\u8a3c\u306e\u65b9\u6cd5\u306b\u5f31\u70b9\u304c\u3042\u308b\u3053\u3068\u3092\u7279\u5b9a\u3057\u307e\u3057\u305f\u3002<\/p>\n

Delpy \u306f\u3001\u30c9\u30e1\u30a4\u30f3 \u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u3078\u306e\u7ba1\u7406\u8005\u30a2\u30af\u30bb\u30b9\u6a29\u3092\u6301\u3064\u653b\u6483\u8005\u304c\u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3066\u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u3092\u507d\u9020\u3067\u304d\u308b\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u507d\u9020\u3055\u308c\u305f\u30c1\u30b1\u30c3\u30c8\u306f\u3001\u653b\u6483\u8005\u306e\u6700\u521d\u306e\u30a8\u30f3\u30c8\u30ea \u30dd\u30a4\u30f3\u30c8\u304c\u9589\u3058\u3089\u308c\u305f\u5f8c\u3067\u3082\u3001\u7d44\u7e54\u306e\u30ea\u30bd\u30fc\u30b9\u3078\u306e\u6c38\u7d9a\u7684\u306a\u30a2\u30af\u30bb\u30b9\u3092\u53d6\u5f97\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

\u30b4\u30fc\u30eb\u30c7\u30f3\u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306e\u8a73\u7d30\u60c5\u5831<\/h2>\n

\u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306f\u3001Microsoft \u306e Active Directory \u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u306e 2 \u3064\u306e\u4e3b\u8981\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3067\u3042\u308b\u30c1\u30b1\u30c3\u30c8\u4fdd\u8a3c\u30c1\u30b1\u30c3\u30c8 (TGT) \u3068\u30ad\u30fc\u914d\u5e03\u30bb\u30f3\u30bf\u30fc (KDC) \u3092\u5229\u7528\u3057\u307e\u3059\u3002\u30e6\u30fc\u30b6\u30fc\u304c Windows \u30c9\u30e1\u30a4\u30f3\u306b\u30ed\u30b0\u30a4\u30f3\u3059\u308b\u3068\u3001KDC \u306f TGT \u3092\u767a\u884c\u3057\u307e\u3059\u3002TGT \u306f\u30e6\u30fc\u30b6\u30fc\u306e ID \u306e\u8a3c\u660e\u3068\u3057\u3066\u6a5f\u80fd\u3057\u3001\u8cc7\u683c\u60c5\u5831\u3092\u7e70\u308a\u8fd4\u3057\u5165\u529b\u3057\u306a\u304f\u3066\u3082\u3055\u307e\u3056\u307e\u306a\u30ea\u30bd\u30fc\u30b9\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u8a31\u53ef\u3057\u307e\u3059\u3002<\/p>\n

\u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306b\u306f\u6b21\u306e\u624b\u9806\u304c\u542b\u307e\u308c\u307e\u3059\u3002<\/p>\n

    \n
  1. \n

    \u8a8d\u8a3c\u8cc7\u6599\u306e\u62bd\u51fa<\/strong>\u653b\u6483\u8005\u306f\u30c9\u30e1\u30a4\u30f3 \u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u3078\u306e\u7ba1\u7406\u30a2\u30af\u30bb\u30b9\u6a29\u3092\u53d6\u5f97\u3057\u3001\u30d7\u30ec\u30fc\u30f3\u30c6\u30ad\u30b9\u30c8\u3067\u4fdd\u5b58\u3055\u308c\u3066\u3044\u308b KDC \u9577\u671f\u79d8\u5bc6\u30ad\u30fc\u306a\u3069\u306e\u5fc5\u8981\u306a\u8a8d\u8a3c\u8cc7\u6599\u3092\u62bd\u51fa\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

  2. \n

    \u9ec4\u91d1\u306e\u30c1\u30b1\u30c3\u30c8\u3092\u507d\u9020\u3059\u308b<\/strong>: \u653b\u6483\u8005\u306f\u62bd\u51fa\u3057\u305f\u8cc7\u6599\u3092\u4f7f\u7528\u3057\u3066\u3001\u4efb\u610f\u306e\u30e6\u30fc\u30b6\u30fc\u6a29\u9650\u3068\u975e\u5e38\u306b\u9577\u3044\u6709\u52b9\u671f\u9593\uff08\u901a\u5e38\u306f\u6570\u5341\u5e74\u306b\u53ca\u3076\uff09\u3092\u6301\u3064 TGT \u3092\u507d\u9020\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

  3. \n

    \u6301\u7d9a\u6027\u3068\u6a2a\u65b9\u5411\u306e\u79fb\u52d5<\/strong>: \u507d\u9020\u3055\u308c\u305f\u30c1\u30b1\u30c3\u30c8\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3078\u306e\u6c38\u7d9a\u7684\u306a\u30a2\u30af\u30bb\u30b9\u3092\u53d6\u5f97\u3057\u3001\u30b7\u30b9\u30c6\u30e0\u9593\u3092\u6a2a\u65b9\u5411\u306b\u79fb\u52d5\u3057\u3066\u6a5f\u5bc6\u30ea\u30bd\u30fc\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3001\u8ffd\u52a0\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4fb5\u5bb3\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

    \u30b4\u30fc\u30eb\u30c7\u30f3\u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306e\u5185\u90e8\u69cb\u9020<\/h2>\n

    \u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306e\u5185\u90e8\u69cb\u9020\u3092\u7406\u89e3\u3059\u308b\u306b\u306f\u3001Kerberos \u30c1\u30b1\u30c3\u30c8\u306e\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3092\u628a\u63e1\u3059\u308b\u3053\u3068\u304c\u91cd\u8981\u3067\u3059\u3002<\/p>\n

      \n
    1. \n

      \u30d8\u30c3\u30c0<\/strong>: \u6697\u53f7\u5316\u30bf\u30a4\u30d7\u3001\u30c1\u30b1\u30c3\u30c8\u30bf\u30a4\u30d7\u3001\u30c1\u30b1\u30c3\u30c8\u30aa\u30d7\u30b7\u30e7\u30f3\u306b\u95a2\u3059\u308b\u60c5\u5831\u304c\u542b\u307e\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n

    2. \n

      \u30c1\u30b1\u30c3\u30c8\u60c5\u5831<\/strong>: \u30e6\u30fc\u30b6\u30fc\u306e ID\u3001\u6a29\u9650\u3001\u304a\u3088\u3073\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30b5\u30fc\u30d3\u30b9\u306b\u95a2\u3059\u308b\u8a73\u7d30\u304c\u542b\u307e\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n

    3. \n

      \u30bb\u30c3\u30b7\u30e7\u30f3\u30ad\u30fc<\/strong>: \u30bb\u30c3\u30b7\u30e7\u30f3\u5185\u306e\u30e1\u30c3\u30bb\u30fc\u30b8\u3092\u6697\u53f7\u5316\u304a\u3088\u3073\u7f72\u540d\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n

    4. \n

      \u8ffd\u52a0\u60c5\u5831<\/strong>: \u30e6\u30fc\u30b6\u30fc\u306e IP \u30a2\u30c9\u30ec\u30b9\u3001\u30c1\u30b1\u30c3\u30c8\u306e\u6709\u52b9\u671f\u9650\u3001\u305d\u306e\u4ed6\u306e\u95a2\u9023\u30c7\u30fc\u30bf\u304c\u542b\u307e\u308c\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

      \u30b4\u30fc\u30eb\u30c7\u30f3\u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306e\u4e3b\u306a\u7279\u5fb4\u306e\u5206\u6790<\/h2>\n

      \u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306b\u306f\u3001\u5f37\u529b\u306a\u8105\u5a01\u3068\u306a\u308b\u3044\u304f\u3064\u304b\u306e\u91cd\u8981\u306a\u7279\u5fb4\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

        \n
      1. \n

        \u6301\u7d9a\u6027<\/strong>: \u507d\u9020\u30c1\u30b1\u30c3\u30c8\u306e\u6709\u52b9\u671f\u9593\u304c\u9577\u3044\u305f\u3081\u3001\u653b\u6483\u8005\u306f\u9577\u671f\u9593\u306b\u308f\u305f\u3063\u3066\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u7dad\u6301\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n

      2. \n

        \u7279\u6a29\u306e\u6607\u683c<\/strong>\u653b\u6483\u8005\u306f\u3001\u3088\u308a\u9ad8\u3044\u30ec\u30d9\u30eb\u306e\u30a2\u30af\u30bb\u30b9\u6a29\u3092\u6301\u3064\u30c1\u30b1\u30c3\u30c8\u3092\u507d\u9020\u3059\u308b\u3053\u3068\u3067\u6a29\u9650\u3092\u6607\u683c\u3057\u3001\u91cd\u8981\u306a\u30b7\u30b9\u30c6\u30e0\u3084\u30c7\u30fc\u30bf\u306b\u5bfe\u3059\u308b\u5236\u5fa1\u6a29\u3092\u7372\u5f97\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n

      3. \n

        \u6a2a\u65b9\u5411\u306e\u52d5\u304d<\/strong>: \u653b\u6483\u8005\u306f\u6c38\u7d9a\u7684\u306a\u30a2\u30af\u30bb\u30b9\u306b\u3088\u308a\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5168\u4f53\u3092\u6a2a\u65b9\u5411\u306b\u79fb\u52d5\u3057\u3066\u3001\u8ffd\u52a0\u306e\u30b7\u30b9\u30c6\u30e0\u3092\u4fb5\u5bb3\u3057\u3001\u5236\u5fa1\u3092\u62e1\u5927\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n

      4. \n

        \u30b9\u30c6\u30eb\u30b9<\/strong>: \u653b\u6483\u306f\u30b7\u30b9\u30c6\u30e0 \u30ed\u30b0\u306b\u75d5\u8de1\u3092\u307b\u3068\u3093\u3069\u6b8b\u3055\u306a\u3044\u305f\u3081\u3001\u691c\u51fa\u304c\u56f0\u96e3\u3067\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

        \u30b4\u30fc\u30eb\u30c7\u30f3\u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306e\u7a2e\u985e<\/h2>\n

        \u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306b\u306f\u4e3b\u306b 2 \u3064\u306e\u7a2e\u985e\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

          \n
        1. \n

          \u30c1\u30b1\u30c3\u30c8\u306e\u76d7\u96e3<\/strong>\u3053\u306e\u65b9\u6cd5\u3067\u306f\u3001\u30c9\u30e1\u30a4\u30f3 \u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u304b\u3089 KDC \u9577\u671f\u79d8\u5bc6\u30ad\u30fc\u306a\u3069\u306e\u8a8d\u8a3c\u30de\u30c6\u30ea\u30a2\u30eb\u3092\u76d7\u307f\u307e\u3059\u3002<\/p>\n<\/li>\n

        2. \n

          \u30aa\u30d5\u30e9\u30a4\u30f3\u653b\u6483<\/strong>: \u30aa\u30d5\u30e9\u30a4\u30f3\u653b\u6483\u306e\u30b7\u30ca\u30ea\u30aa\u3067\u306f\u3001\u653b\u6483\u8005\u306f\u30c9\u30e1\u30a4\u30f3 \u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u3092\u76f4\u63a5\u4fb5\u5bb3\u3059\u308b\u5fc5\u8981\u306f\u306a\u304f\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3084\u30c9\u30e1\u30a4\u30f3 \u30b9\u30ca\u30c3\u30d7\u30b7\u30e7\u30c3\u30c8\u304b\u3089\u5fc5\u8981\u306a\u8cc7\u6599\u3092\u62bd\u51fa\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

          \u4ee5\u4e0b\u306b 2 \u3064\u306e\u30bf\u30a4\u30d7\u306e\u6bd4\u8f03\u8868\u3092\u793a\u3057\u307e\u3059\u3002<\/p>\n\n\n\n\n\n\n
          \u30bf\u30a4\u30d7<\/th>\n\u653b\u6483\u65b9\u6cd5<\/th>\n\u8907\u96d1<\/th>\n\u691c\u51fa\u96e3\u6613\u5ea6<\/th>\n<\/tr>\n<\/thead>\n
          \u30c1\u30b1\u30c3\u30c8\u306e\u76d7\u96e3<\/td>\n\u30c9\u30e1\u30a4\u30f3\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u3078\u306e\u76f4\u63a5\u30a2\u30af\u30bb\u30b9<\/td>\n\u9ad8\u3044<\/td>\n\u4e2d\u304f\u3089\u3044<\/td>\n<\/tr>\n
          \u30aa\u30d5\u30e9\u30a4\u30f3\u653b\u6483<\/td>\n\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u307e\u305f\u306f\u30b9\u30ca\u30c3\u30d7\u30b7\u30e7\u30c3\u30c8\u3078\u306e\u30a2\u30af\u30bb\u30b9<\/td>\n\u4e2d\u304f\u3089\u3044<\/td>\n\u4f4e\u3044<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

          \u30b4\u30fc\u30eb\u30c7\u30f3\u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306e\u4f7f\u7528\u65b9\u6cd5\u3001\u554f\u984c\u3001\u89e3\u6c7a\u7b56<\/h2>\n

          \u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306f\u3001\u7d44\u7e54\u306b\u3068\u3063\u3066\u6df1\u523b\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u8ab2\u984c\u3092\u3082\u305f\u3089\u3057\u307e\u3059\u3002<\/p>\n

            \n
          1. \n

            \u4e0d\u6b63\u30a2\u30af\u30bb\u30b9<\/strong>: \u653b\u6483\u8005\u306f\u6a5f\u5bc6\u30c7\u30fc\u30bf\u3084\u30ea\u30bd\u30fc\u30b9\u306b\u4e0d\u6b63\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3001\u30c7\u30fc\u30bf\u4fb5\u5bb3\u3092\u5f15\u304d\u8d77\u3053\u3059\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n

          2. \n

            \u6a29\u9650\u6607\u683c<\/strong>: \u653b\u6483\u8005\u306f\u3001\u9ad8\u6a29\u9650\u306e\u30c1\u30b1\u30c3\u30c8\u3092\u507d\u9020\u3059\u308b\u3053\u3068\u3067\u3001\u6a29\u9650\u3092\u6607\u683c\u3057\u3001\u91cd\u8981\u306a\u30b7\u30b9\u30c6\u30e0\u3092\u5236\u5fa1\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n

          3. \n

            \u691c\u51fa\u306e\u6b20\u5982<\/strong>: \u653b\u6483\u306f\u75d5\u8de1\u3092\u307b\u3068\u3093\u3069\u6b8b\u3055\u306a\u3044\u305f\u3081\u3001\u691c\u51fa\u3068\u9632\u6b62\u304c\u56f0\u96e3\u3067\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

            \u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306e\u30ea\u30b9\u30af\u3092\u8efd\u6e1b\u3059\u308b\u306b\u306f\u3001\u7d44\u7e54\u306f\u6b21\u306e\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u3092\u691c\u8a0e\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

              \n
            1. \n

              \u6700\u4f4e\u7279\u6a29<\/strong>: \u6700\u5c0f\u6a29\u9650\u30e2\u30c7\u30eb\u3092\u5b9f\u88c5\u3057\u3066\u3001\u4e0d\u8981\u306a\u30a2\u30af\u30bb\u30b9\u3092\u5236\u9650\u3057\u3001\u653b\u6483\u304c\u6210\u529f\u3057\u305f\u5834\u5408\u306e\u5f71\u97ff\u3092\u6700\u5c0f\u9650\u306b\u6291\u3048\u307e\u3059\u3002<\/p>\n<\/li>\n

            2. \n

              \u5b9a\u671f\u7684\u306a\u30e2\u30cb\u30bf\u30ea\u30f3\u30b0<\/strong>: \u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u3092\u7d99\u7d9a\u7684\u306b\u76e3\u8996\u3057\u3001\u7591\u308f\u3057\u3044\u52d5\u4f5c\u3084\u7570\u5e38\u304c\u306a\u3044\u304b\u78ba\u8a8d\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

            3. \n

              \u8cc7\u683c\u60c5\u5831\u7ba1\u7406<\/strong>: \u30ad\u30fc\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5b9a\u671f\u7684\u306b\u30ed\u30fc\u30c6\u30fc\u30b7\u30e7\u30f3\u3059\u308b\u306a\u3069\u3001\u8cc7\u683c\u60c5\u5831\u7ba1\u7406\u306e\u5b9f\u8df5\u3092\u5f37\u5316\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

            4. \n

              \u591a\u8981\u7d20\u8a8d\u8a3c<\/strong>: \u591a\u8981\u7d20\u8a8d\u8a3c (MFA) \u3092\u9069\u7528\u3057\u3066\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u3055\u3089\u306b\u5f37\u5316\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

              \u4e3b\u306a\u7279\u5fb4\u3068\u305d\u306e\u4ed6\u306e\u6bd4\u8f03<\/h2>\n

              \u4ee5\u4e0b\u306f\u3001\u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u3068\u985e\u4f3c\u306e\u7528\u8a9e\u3092\u6bd4\u8f03\u3057\u305f\u8868\u3067\u3059\u3002<\/p>\n\n\n\n\n\n\n\n
              \u5b66\u671f<\/th>\n\u8aac\u660e<\/th>\n<\/tr>\n<\/thead>\n
              \u30b4\u30fc\u30eb\u30c7\u30f3\u30c1\u30b1\u30c3\u30c8\u30a2\u30bf\u30c3\u30af<\/td>\nKerberos \u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3066\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3092\u5b9f\u884c\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n
              \u30b7\u30eb\u30d0\u30fc\u30c1\u30b1\u30c3\u30c8\u30a2\u30bf\u30c3\u30af<\/td>\n\u4e0d\u6b63\u306a\u30ea\u30bd\u30fc\u30b9\u30a2\u30af\u30bb\u30b9\u306e\u305f\u3081\u306e\u30b5\u30fc\u30d3\u30b9 \u30c1\u30b1\u30c3\u30c8\u3092\u507d\u9020\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n
              \u30d1\u30b9\u30fb\u30b6\u30fb\u30c1\u30b1\u30c3\u30c8\u653b\u6483<\/td>\n\u76d7\u307e\u308c\u305f TGT \u307e\u305f\u306f TGS \u3092\u4f7f\u7528\u3057\u3066\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3092\u884c\u3044\u307e\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

              \u672a\u6765\u306e\u5c55\u671b\u3068\u30c6\u30af\u30ce\u30ed\u30b8\u30fc<\/h2>\n

              \u30c6\u30af\u30ce\u30ed\u30b8\u30fc\u304c\u9032\u5316\u3059\u308b\u306b\u3064\u308c\u3001\u30b5\u30a4\u30d0\u30fc\u8105\u5a01\u3082\u9032\u5316\u3057\u307e\u3059\u3002\u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u3084\u95a2\u9023\u3059\u308b\u8105\u5a01\u306b\u5bfe\u6297\u3059\u308b\u305f\u3081\u306b\u3001\u6b21\u306e\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\u304c\u3055\u3089\u306b\u91cd\u8981\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

                \n
              1. \n

                \u30bc\u30ed\u30c8\u30e9\u30b9\u30c8\u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3<\/strong>: \u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u306f\u30e6\u30fc\u30b6\u30fc\u3084\u30c7\u30d0\u30a4\u30b9\u3092\u4fe1\u983c\u305b\u305a\u3001ID \u3068\u30a2\u30af\u30bb\u30b9\u306e\u7d99\u7d9a\u7684\u306a\u691c\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30e2\u30c7\u30eb\u3002<\/p>\n<\/li>\n

              2. \n

                \u884c\u52d5\u5206\u6790<\/strong>: \u7570\u5e38\u306a\u52d5\u4f5c\u3084\u8cc7\u683c\u60c5\u5831\u507d\u9020\u306e\u6f5c\u5728\u7684\u306a\u5146\u5019\u3092\u8b58\u5225\u3059\u308b\u9ad8\u5ea6\u306a\u6a5f\u68b0\u5b66\u7fd2\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3002<\/p>\n<\/li>\n

              3. \n

                \u5f37\u5316\u3055\u308c\u305f\u6697\u53f7\u5316<\/strong>: \u8a8d\u8a3c\u8cc7\u6599\u304c\u7c21\u5358\u306b\u62bd\u51fa\u3055\u308c\u306a\u3044\u3088\u3046\u306b\u4fdd\u8b77\u3059\u308b\u305f\u3081\u306e\u3001\u3088\u308a\u5f37\u529b\u306a\u6697\u53f7\u5316\u65b9\u5f0f\u3002<\/p>\n<\/li>\n<\/ol>\n

                \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u304c\u3069\u306e\u3088\u3046\u306b\u4f7f\u7528\u3055\u308c\u308b\u304b\u3001\u307e\u305f\u306f\u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u3068\u3069\u306e\u3088\u3046\u306b\u95a2\u9023\u4ed8\u3051\u3089\u308c\u308b\u304b<\/h2>\n

                OneProxy \u304c\u63d0\u4f9b\u3059\u308b\u3088\u3046\u306a\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306b\u304a\u3044\u3066\u91cd\u8981\u306a\u5f79\u5272\u3092\u679c\u305f\u3057\u307e\u3059\u3002\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u81ea\u4f53\u306f\u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306b\u76f4\u63a5\u95a2\u4e0e\u3059\u308b\u3053\u3068\u306f\u3042\u308a\u307e\u305b\u3093\u304c\u3001\u6b21\u306e\u65b9\u6cd5\u3067\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u5f37\u5316\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n

                  \n
                1. \n

                  \u4ea4\u901a\u691c\u67fb<\/strong>: \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u691c\u67fb\u3057\u3001\u7591\u308f\u3057\u3044\u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u3092\u691c\u51fa\u3057\u3066\u30d6\u30ed\u30c3\u30af\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n

                2. \n

                  \u30a2\u30af\u30bb\u30b9\u5236\u5fa1<\/strong>: \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u3092\u5b9f\u65bd\u3057\u3001\u6a29\u9650\u306e\u306a\u3044\u30e6\u30fc\u30b6\u30fc\u304c\u6a5f\u5bc6\u30ea\u30bd\u30fc\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u306e\u3092\u9632\u3050\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n

                3. \n

                  \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0<\/strong>: \u30d7\u30ed\u30ad\u30b7\u306f\u60aa\u610f\u306e\u3042\u308b\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3057\u3066\u30d6\u30ed\u30c3\u30af\u3057\u3001\u6f5c\u5728\u7684\u306a\u60aa\u7528\u306e\u653b\u6483\u5bfe\u8c61\u9818\u57df\u3092\u6e1b\u3089\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

                  \u95a2\u9023\u30ea\u30f3\u30af<\/h2>\n

                  \u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u304a\u3088\u3073\u95a2\u9023\u30c8\u30d4\u30c3\u30af\u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u6b21\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n

                    \n
                  1. MITRE ATT&CK \u2013 \u30b4\u30fc\u30eb\u30c7\u30f3\u30c1\u30b1\u30c3\u30c8<\/a><\/li>\n
                  2. \u30b4\u30fc\u30eb\u30c7\u30f3\u30c1\u30b1\u30c3\u30c8\u306b\u95a2\u3059\u308b\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea<\/a><\/li>\n
                  3. SANS Institute \u2013 \u30b4\u30fc\u30eb\u30c7\u30f3\u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306e\u89e3\u8aac<\/a><\/li>\n
                  4. Mimikatz GitHub \u30ea\u30dd\u30b8\u30c8\u30ea<\/a><\/li>\n<\/ol>\n

                    \u30b4\u30fc\u30eb\u30c7\u30f3 \u30c1\u30b1\u30c3\u30c8\u653b\u6483\u306a\u3069\u306e\u9ad8\u5ea6\u306a\u30b5\u30a4\u30d0\u30fc\u8105\u5a01\u304b\u3089\u7d44\u7e54\u3092\u4fdd\u8b77\u3059\u308b\u306b\u306f\u3001\u5e38\u306b\u60c5\u5831\u3092\u5165\u624b\u3057\u3001\u7a4d\u6975\u7684\u306b\u884c\u52d5\u3059\u308b\u3053\u3068\u304c\u91cd\u8981\u3067\u3059\u3002\u5b9a\u671f\u7684\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8a55\u4fa1\u3001\u5f93\u696d\u54e1\u306e\u30c8\u30ec\u30fc\u30cb\u30f3\u30b0\u3001\u30d9\u30b9\u30c8 \u30d7\u30e9\u30af\u30c6\u30a3\u30b9\u306e\u63a1\u7528\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3068\u30c7\u30fc\u30bf\u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u306e\u91cd\u8981\u306a\u30b9\u30c6\u30c3\u30d7\u3067\u3059\u3002<\/p>","protected":false},"featured_media":477359,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477358","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about Golden Ticket Attack: Unraveling the Dark Secrets of Credential Forgery<\/mark>","faq_items":[{"question":"What is the Golden Ticket Attack, and how does it work?","answer":"

                    The Golden Ticket Attack is a sophisticated cyber attack that exploits weaknesses in Microsoft's Active Directory infrastructure. It allows attackers to forge Kerberos tickets, granting them unauthorized access to a network. Attackers gain administrative access to a domain controller, extract authentication material, and then forge a long-lasting ticket with arbitrary user privileges, providing persistent access to the network.<\/p>"},{"question":"Who discovered the Golden Ticket Attack?","answer":"

                    The Golden Ticket Attack was first discovered and publicly revealed by security researcher Benjamin Delpy in 2014.<\/p>"},{"question":"What are the key features of the Golden Ticket Attack?","answer":"

                    The Golden Ticket Attack offers persistence, elevation of privilege, lateral movement, and stealth. Its long-lasting forged ticket grants attackers prolonged access to the network, allowing them to escalate privileges and move laterally across systems with little trace.<\/p>"},{"question":"Are there different types of Golden Ticket Attacks?","answer":"

                    Yes, there are two primary types. One involves stealing authentication material directly from a domain controller, while the other is an offline attack that extracts the necessary material from backups or domain snapshots.<\/p>"},{"question":"How can organizations defend against Golden Ticket Attacks?","answer":"

                    To mitigate the risk, organizations should implement least-privilege access, regularly monitor network activities, strengthen credential management, and enforce multi-factor authentication (MFA).<\/p>"},{"question":"What is the difference between Golden Ticket Attack, Silver Ticket Attack, and Pass-the-Ticket Attack?","answer":"

                    While all three attacks involve exploiting Kerberos weaknesses, the Golden Ticket Attack forges Kerberos tickets for unauthorized access. The Silver Ticket Attack, on the other hand, forges service tickets, and Pass-the-Ticket Attack uses stolen tickets for unauthorized access.<\/p>"},{"question":"What are the future perspectives and technologies to counter such attacks?","answer":"

                    Technologies like Zero Trust Architecture, behavioral analytics, and enhanced encryption may become prominent to combat Golden Ticket Attacks and related threats in the future.<\/p>"},{"question":"How can proxy servers help in dealing with Golden Ticket Attacks?","answer":"

                    Proxy servers can enhance security by inspecting network traffic, enforcing access controls, and filtering malicious traffic, reducing the attack surface for potential exploits.<\/p>"},{"question":"Where can I find more information about Golden Ticket Attacks?","answer":"

                    For more information about Golden Ticket Attacks and related topics, you can refer to the links provided below:<\/p>

                    1. MITRE ATT&CK - Golden Ticket<\/a><\/li>
                    2. Microsoft Security Advisory on Golden Ticket<\/a><\/li>
                    3. SANS Institute - Golden Ticket Attack Explained<\/a><\/li>
                    4. Mimikatz GitHub Repository<\/a><\/li><\/ol>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/477358","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/477358\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media\/477359"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media?parent=477358"}],"curies":[{"name":"\u3046\u30fc\u3093","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}