{"id":477358,"date":"2023-08-09T09:11:34","date_gmt":"2023-08-09T09:11:34","guid":{"rendered":""},"modified":"2023-09-05T11:14:33","modified_gmt":"2023-09-05T11:14:33","slug":"golden-ticket-attack","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/vn\/wiki\/golden-ticket-attack\/","title":{"rendered":"Cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ea5m v\u00e9 v\u00e0ng"},"content":{"rendered":"

Cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ea5m v\u00e9 v\u00e0ng l\u00e0 m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng tinh vi nh\u1eb1m khai th\u00e1c \u0111i\u1ec3m y\u1ebfu trong c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng Active Directory c\u1ee7a Microsoft. N\u00f3 cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng gi\u1ea3 m\u1ea1o v\u00e9 Kerberos, \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 x\u00e1c th\u1ef1c trong c\u00e1c mi\u1ec1n Windows, c\u1ea5p cho ch\u00fang quy\u1ec1n truy c\u1eadp tr\u00e1i ph\u00e9p v\u00e0o m\u1ea1ng. Cu\u1ed9c t\u1ea5n c\u00f4ng l\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n v\u00e0 ti\u1ebft l\u1ed9 c\u00f4ng khai b\u1edfi nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt Benjamin Delpy v\u00e0o n\u0103m 2014. K\u1ec3 t\u1eeb \u0111\u00f3, n\u00f3 \u0111\u00e3 tr\u1edf th\u00e0nh m\u1ed1i lo ng\u1ea1i l\u1edbn \u0111\u1ed1i v\u1edbi c\u00e1c qu\u1ea3n tr\u1ecb vi\u00ean v\u00e0 t\u1ed5 ch\u1ee9c CNTT tr\u00ean to\u00e0n th\u1ebf gi\u1edbi.<\/p>\n

L\u1ecbch s\u1eed ngu\u1ed3n g\u1ed1c c\u1ee7a cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ea5m v\u00e9 v\u00e0ng<\/h2>\n

Ngu\u1ed3n g\u1ed1c c\u1ee7a Cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ea5m v\u00e9 v\u00e0ng c\u00f3 th\u1ec3 b\u1eaft ngu\u1ed3n t\u1eeb vi\u1ec7c ph\u00e1t hi\u1ec7n ra l\u1ed7 h\u1ed5ng trong qu\u00e1 tr\u00ecnh tri\u1ec3n khai Kerberos c\u1ee7a Microsoft. Giao th\u1ee9c x\u00e1c th\u1ef1c Kerberos l\u00e0 th\u00e0nh ph\u1ea7n c\u1ed1t l\u00f5i c\u1ee7a Active Directory, cung c\u1ea5p m\u1ed9t c\u00e1ch an to\u00e0n \u0111\u1ec3 ng\u01b0\u1eddi d\u00f9ng x\u00e1c th\u1ef1c v\u00e0 c\u00f3 \u0111\u01b0\u1ee3c quy\u1ec1n truy c\u1eadp v\u00e0o t\u00e0i nguy\u00ean m\u1ea1ng. V\u00e0o n\u0103m 2014, Benjamin Delpy, ng\u01b0\u1eddi t\u1ea1o ra c\u00f4ng c\u1ee5 \u201cMimikatz\u201d, \u0111\u00e3 x\u00e1c \u0111\u1ecbnh nh\u1eefng \u0111i\u1ec3m y\u1ebfu trong c\u00e1ch ph\u00e1t h\u00e0nh v\u00e0 x\u00e1c th\u1ef1c v\u00e9 Kerberos.<\/p>\n

Delpy ti\u1ebft l\u1ed9 r\u1eb1ng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 quy\u1ec1n truy c\u1eadp qu\u1ea3n tr\u1ecb v\u00e0o b\u1ed9 \u0111i\u1ec1u khi\u1ec3n mi\u1ec1n c\u00f3 th\u1ec3 khai th\u00e1c nh\u1eefng l\u1ed7 h\u1ed5ng n\u00e0y \u0111\u1ec3 gi\u1ea3 m\u1ea1o V\u00e9 V\u00e0ng. Sau \u0111\u00f3, v\u00e9 gi\u1ea3 m\u1ea1o n\u00e0y c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 c\u00f3 quy\u1ec1n truy c\u1eadp li\u00ean t\u1ee5c v\u00e0o t\u00e0i nguy\u00ean c\u1ee7a t\u1ed5 ch\u1ee9c, ngay c\u1ea3 sau khi \u0111i\u1ec3m truy c\u1eadp ban \u0111\u1ea7u c\u1ee7a k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 b\u1ecb \u0111\u00f3ng.<\/p>\n

Th\u00f4ng tin chi ti\u1ebft v\u1ec1 Cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e9 v\u00e0ng<\/h2>\n

Cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ea5m v\u00e9 v\u00e0ng t\u1eadn d\u1ee5ng hai th\u00e0nh ph\u1ea7n ch\u00ednh c\u1ee7a c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng Active Directory c\u1ee7a Microsoft: V\u00e9 c\u1ea5p v\u00e9 (TGT) v\u00e0 Trung t\u00e2m ph\u00e2n ph\u1ed1i kh\u00f3a (KDC). Khi ng\u01b0\u1eddi d\u00f9ng \u0111\u0103ng nh\u1eadp v\u00e0o mi\u1ec1n Windows, KDC s\u1ebd c\u1ea5p TGT, ho\u1ea1t \u0111\u1ed9ng nh\u01b0 m\u1ed9t b\u1eb1ng ch\u1ee9ng v\u1ec1 danh t\u00ednh c\u1ee7a ng\u01b0\u1eddi d\u00f9ng v\u00e0 c\u1ea5p quy\u1ec1n truy c\u1eadp v\u00e0o nhi\u1ec1u t\u00e0i nguy\u00ean kh\u00e1c nhau m\u00e0 kh\u00f4ng c\u1ea7n ph\u1ea3i nh\u1eadp th\u00f4ng tin x\u00e1c th\u1ef1c nhi\u1ec1u l\u1ea7n.<\/p>\n

Cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ea5m v\u00e9 v\u00e0ng bao g\u1ed3m c\u00e1c b\u01b0\u1edbc sau:<\/p>\n

    \n
  1. \n

    Tr\u00edch xu\u1ea5t t\u00e0i li\u1ec7u x\u00e1c th\u1ef1c<\/strong>: K\u1ebb t\u1ea5n c\u00f4ng gi\u00e0nh \u0111\u01b0\u1ee3c quy\u1ec1n truy c\u1eadp qu\u1ea3n tr\u1ecb v\u00e0o b\u1ed9 \u0111i\u1ec1u khi\u1ec3n mi\u1ec1n v\u00e0 tr\u00edch xu\u1ea5t t\u00e0i li\u1ec7u x\u00e1c th\u1ef1c c\u1ea7n thi\u1ebft, bao g\u1ed3m kh\u00f3a b\u00ed m\u1eadt d\u00e0i h\u1ea1n KDC, \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef d\u01b0\u1edbi d\u1ea1ng v\u0103n b\u1ea3n g\u1ed1c.<\/p>\n<\/li>\n

  2. \n

    R\u00e8n t\u1ea5m v\u00e9 v\u00e0ng<\/strong>: B\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng t\u00e0i li\u1ec7u \u0111\u01b0\u1ee3c tr\u00edch xu\u1ea5t, k\u1ebb t\u1ea5n c\u00f4ng gi\u1ea3 m\u1ea1o TGT v\u1edbi c\u00e1c \u0111\u1eb7c quy\u1ec1n ng\u01b0\u1eddi d\u00f9ng t\u00f9y \u00fd v\u00e0 th\u1eddi h\u1ea1n hi\u1ec7u l\u1ef1c r\u1ea5t d\u00e0i, th\u01b0\u1eddng k\u00e9o d\u00e0i v\u00e0i th\u1eadp k\u1ef7.<\/p>\n<\/li>\n

  3. \n

    S\u1ef1 ki\u00ean tr\u00ec v\u00e0 chuy\u1ec3n \u0111\u1ed9ng ngang<\/strong>: V\u00e9 gi\u1ea3 m\u1ea1o sau \u0111\u00f3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 c\u00f3 quy\u1ec1n truy c\u1eadp li\u00ean t\u1ee5c v\u00e0o m\u1ea1ng v\u00e0 di chuy\u1ec3n ngang qua c\u00e1c h\u1ec7 th\u1ed1ng, truy c\u1eadp c\u00e1c t\u00e0i nguy\u00ean nh\u1ea1y c\u1ea3m v\u00e0 x\u00e2m ph\u1ea1m c\u00e1c t\u00e0i kho\u1ea3n b\u1ed5 sung.<\/p>\n<\/li>\n<\/ol>\n

    C\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ea5m v\u00e9 v\u00e0ng<\/h2>\n

    \u0110\u1ec3 hi\u1ec3u c\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a Cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e9 v\u00e0ng, \u0111i\u1ec1u c\u1ea7n thi\u1ebft l\u00e0 ph\u1ea3i n\u1eafm \u0111\u01b0\u1ee3c c\u00e1c th\u00e0nh ph\u1ea7n c\u1ee7a v\u00e9 Kerberos:<\/p>\n

      \n
    1. \n

      ti\u00eau \u0111\u1ec1<\/strong>: Ch\u1ee9a th\u00f4ng tin v\u1ec1 lo\u1ea1i m\u00e3 h\u00f3a, lo\u1ea1i v\u00e9 v\u00e0 c\u00e1c t\u00f9y ch\u1ecdn v\u1ec1 v\u00e9.<\/p>\n<\/li>\n

    2. \n

      th\u00f4ng tin v\u00e9<\/strong>: Bao g\u1ed3m th\u00f4ng tin chi ti\u1ebft v\u1ec1 danh t\u00ednh, \u0111\u1eb7c quy\u1ec1n c\u1ee7a ng\u01b0\u1eddi d\u00f9ng v\u00e0 c\u00e1c d\u1ecbch v\u1ee5 m\u1ea1ng m\u00e0 h\u1ecd c\u00f3 th\u1ec3 truy c\u1eadp.<\/p>\n<\/li>\n

    3. \n

      Kh\u00f3a phi\u00ean<\/strong>: \u0110\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 m\u00e3 h\u00f3a v\u00e0 k\u00fd tin nh\u1eafn trong phi\u00ean.<\/p>\n<\/li>\n

    4. \n

      th\u00f4ng tin th\u00eam<\/strong>: C\u00f3 th\u1ec3 bao g\u1ed3m \u0111\u1ecba ch\u1ec9 IP c\u1ee7a ng\u01b0\u1eddi d\u00f9ng, th\u1eddi gian h\u1ebft h\u1ea1n c\u1ee7a v\u00e9 v\u00e0 c\u00e1c d\u1eef li\u1ec7u li\u00ean quan kh\u00e1c.<\/p>\n<\/li>\n<\/ol>\n

      Ph\u00e2n t\u00edch c\u00e1c t\u00ednh n\u0103ng ch\u00ednh c\u1ee7a cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e9 v\u00e0ng<\/h2>\n

      Cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ea5m v\u00e9 v\u00e0ng s\u1edf h\u1eefu m\u1ed9t s\u1ed1 t\u00ednh n\u0103ng ch\u00ednh khi\u1ebfn n\u00f3 tr\u1edf th\u00e0nh m\u1ed1i \u0111e d\u1ecda ti\u1ec1m t\u00e0ng:<\/p>\n

        \n
      1. \n

        Ki\u00ean tr\u00ec<\/strong>: Th\u1eddi h\u1ea1n hi\u1ec7u l\u1ef1c d\u00e0i c\u1ee7a v\u00e9 gi\u1ea3 cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng duy tr\u00ec quy\u1ec1n truy c\u1eadp v\u00e0o m\u1ea1ng trong th\u1eddi gian d\u00e0i.<\/p>\n<\/li>\n

      2. \n

        N\u00e2ng cao \u0111\u1eb7c quy\u1ec1n<\/strong>: Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 n\u00e2ng cao \u0111\u1eb7c quy\u1ec1n c\u1ee7a m\u00ecnh b\u1eb1ng c\u00e1ch gi\u1ea3 m\u1ea1o c\u00e1c v\u00e9 c\u00f3 quy\u1ec1n truy c\u1eadp c\u1ea5p cao h\u01a1n, c\u1ea5p cho ch\u00fang quy\u1ec1n ki\u1ec3m so\u00e1t c\u00e1c h\u1ec7 th\u1ed1ng v\u00e0 d\u1eef li\u1ec7u quan tr\u1ecdng.<\/p>\n<\/li>\n

      3. \n

        Chuy\u1ec3n \u0111\u1ed9ng b\u00ean<\/strong>: V\u1edbi quy\u1ec1n truy c\u1eadp li\u00ean t\u1ee5c, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 di chuy\u1ec3n ngang qua m\u1ea1ng, x\u00e2m ph\u1ea1m c\u00e1c h\u1ec7 th\u1ed1ng b\u1ed5 sung v\u00e0 t\u0103ng c\u01b0\u1eddng ki\u1ec3m so\u00e1t.<\/p>\n<\/li>\n

      4. \n

        t\u00e0ng h\u00ecnh<\/strong>: Cu\u1ed9c t\u1ea5n c\u00f4ng \u0111\u1ec3 l\u1ea1i r\u1ea5t \u00edt ho\u1eb7c kh\u00f4ng c\u00f3 d\u1ea5u v\u1ebft trong nh\u1eadt k\u00fd h\u1ec7 th\u1ed1ng, khi\u1ebfn kh\u00f3 b\u1ecb ph\u00e1t hi\u1ec7n.<\/p>\n<\/li>\n<\/ol>\n

        C\u00e1c ki\u1ec3u t\u1ea5n c\u00f4ng v\u00e9 v\u00e0ng<\/h2>\n

        C\u00f3 hai lo\u1ea1i T\u1ea5n c\u00f4ng v\u00e9 v\u00e0ng ch\u00ednh:<\/p>\n

          \n
        1. \n

          Tr\u1ed9m v\u00e9<\/strong>: C\u00e1ch ti\u1ebfp c\u1eadn n\u00e0y li\u00ean quan \u0111\u1ebfn vi\u1ec7c \u0111\u00e1nh c\u1eafp t\u00e0i li\u1ec7u x\u00e1c th\u1ef1c, ch\u1eb3ng h\u1ea1n nh\u01b0 kh\u00f3a b\u00ed m\u1eadt d\u00e0i h\u1ea1n KDC, t\u1eeb b\u1ed9 \u0111i\u1ec1u khi\u1ec3n mi\u1ec1n.<\/p>\n<\/li>\n

        2. \n

          T\u1ea5n c\u00f4ng ngo\u1ea1i tuy\u1ebfn<\/strong>: Trong k\u1ecbch b\u1ea3n t\u1ea5n c\u00f4ng ngo\u1ea1i tuy\u1ebfn, k\u1ebb t\u1ea5n c\u00f4ng kh\u00f4ng c\u1ea7n x\u00e2m ph\u1ea1m tr\u1ef1c ti\u1ebfp b\u1ed9 \u0111i\u1ec1u khi\u1ec3n mi\u1ec1n. Thay v\u00e0o \u0111\u00f3, h\u1ecd c\u00f3 th\u1ec3 tr\u00edch xu\u1ea5t t\u00e0i li\u1ec7u c\u1ea7n thi\u1ebft t\u1eeb b\u1ea3n sao l\u01b0u ho\u1eb7c \u1ea3nh ch\u1ee5p nhanh mi\u1ec1n.<\/p>\n<\/li>\n<\/ol>\n

          D\u01b0\u1edbi \u0111\u00e2y l\u00e0 b\u1ea3ng so s\u00e1nh c\u1ee7a hai lo\u1ea1i:<\/p>\n\n\n\n\n\n\n
          Ki\u1ec3u<\/th>\nPh\u01b0\u01a1ng th\u1ee9c t\u1ea5n c\u00f4ng<\/th>\n\u0110\u1ed9 ph\u1ee9c t\u1ea1p<\/th>\nKh\u00f3 ph\u00e1t hi\u1ec7n<\/th>\n<\/tr>\n<\/thead>\n
          Tr\u1ed9m v\u00e9<\/td>\nTruy c\u1eadp tr\u1ef1c ti\u1ebfp v\u00e0o b\u1ed9 \u0111i\u1ec1u khi\u1ec3n mi\u1ec1n<\/td>\nCao<\/td>\nTrung b\u00ecnh<\/td>\n<\/tr>\n
          T\u1ea5n c\u00f4ng ngo\u1ea1i tuy\u1ebfn<\/td>\nTruy c\u1eadp v\u00e0o b\u1ea3n sao l\u01b0u ho\u1eb7c \u1ea3nh ch\u1ee5p nhanh<\/td>\nTrung b\u00ecnh<\/td>\nTh\u1ea5p<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

          C\u00e1ch s\u1eed d\u1ee5ng cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e9 v\u00e0ng, v\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p<\/h2>\n

          Cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ea5m v\u00e9 v\u00e0ng \u0111\u1eb7t ra nh\u1eefng th\u00e1ch th\u1ee9c b\u1ea3o m\u1eadt nghi\u00eam tr\u1ecdng cho c\u00e1c t\u1ed5 ch\u1ee9c:<\/p>\n

            \n
          1. \n

            Truy c\u1eadp tr\u00e1i ph\u00e9p<\/strong>: Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 c\u00f3 \u0111\u01b0\u1ee3c quy\u1ec1n truy c\u1eadp tr\u00e1i ph\u00e9p v\u00e0o d\u1eef li\u1ec7u v\u00e0 t\u00e0i nguy\u00ean nh\u1ea1y c\u1ea3m, d\u1eabn \u0111\u1ebfn nguy c\u01a1 vi ph\u1ea1m d\u1eef li\u1ec7u.<\/p>\n<\/li>\n

          2. \n

            N\u00e2ng cao \u0111\u1eb7c quy\u1ec1n<\/strong>: B\u1eb1ng c\u00e1ch gi\u1ea3 m\u1ea1o c\u00e1c v\u00e9 \u0111\u1eb7c quy\u1ec1n cao, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 leo thang \u0111\u1eb7c quy\u1ec1n v\u00e0 chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t c\u00e1c h\u1ec7 th\u1ed1ng quan tr\u1ecdng.<\/p>\n<\/li>\n

          3. \n

            Thi\u1ebfu ph\u00e1t hi\u1ec7n<\/strong>: Cu\u1ed9c t\u1ea5n c\u00f4ng \u0111\u1ec3 l\u1ea1i d\u1ea5u v\u1ebft t\u1ed1i thi\u1ec3u, khi\u1ebfn vi\u1ec7c ph\u00e1t hi\u1ec7n v\u00e0 ng\u0103n ch\u1eb7n tr\u1edf n\u00ean kh\u00f3 kh\u0103n.<\/p>\n<\/li>\n<\/ol>\n

            \u0110\u1ec3 gi\u1ea3m thi\u1ec3u r\u1ee7i ro c\u1ee7a cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e9 v\u00e0ng, c\u00e1c t\u1ed5 ch\u1ee9c n\u00ean xem x\u00e9t c\u00e1c gi\u1ea3i ph\u00e1p sau:<\/p>\n

              \n
            1. \n

              \u0110\u1eb7c quy\u1ec1n nh\u1ea5t<\/strong>: Tri\u1ec3n khai m\u00f4 h\u00ecnh \u00edt \u0111\u1eb7c quy\u1ec1n nh\u1ea5t \u0111\u1ec3 h\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp kh\u00f4ng c\u1ea7n thi\u1ebft v\u00e0 gi\u1ea3m thi\u1ec3u t\u00e1c \u0111\u1ed9ng c\u1ee7a m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng th\u00e0nh c\u00f4ng.<\/p>\n<\/li>\n

            2. \n

              Gi\u00e1m s\u00e1t th\u01b0\u1eddng xuy\u00ean<\/strong>: Li\u00ean t\u1ee5c gi\u00e1m s\u00e1t c\u00e1c ho\u1ea1t \u0111\u1ed9ng m\u1ea1ng \u0111\u1ec3 ph\u00e1t hi\u1ec7n c\u00e1c h\u00e0nh vi \u0111\u00e1ng ng\u1edd v\u00e0 b\u1ea5t th\u01b0\u1eddng.<\/p>\n<\/li>\n

            3. \n

              Qu\u1ea3n l\u00fd th\u00f4ng tin x\u00e1c th\u1ef1c<\/strong>: T\u0103ng c\u01b0\u1eddng c\u00e1c bi\u1ec7n ph\u00e1p qu\u1ea3n l\u00fd th\u00f4ng tin x\u00e1c th\u1ef1c, ch\u1eb3ng h\u1ea1n nh\u01b0 th\u01b0\u1eddng xuy\u00ean lu\u00e2n chuy\u1ec3n kh\u00f3a v\u00e0 m\u1eadt kh\u1ea9u.<\/p>\n<\/li>\n

            4. \n

              X\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1<\/strong>: Th\u1ef1c thi x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 (MFA) \u0111\u1ec3 th\u00eam m\u1ed9t l\u1edbp b\u1ea3o m\u1eadt b\u1ed5 sung.<\/p>\n<\/li>\n<\/ol>\n

              \u0110\u1eb7c \u0111i\u1ec3m ch\u00ednh v\u00e0 nh\u1eefng so s\u00e1nh kh\u00e1c<\/h2>\n

              \u0110\u00e2y l\u00e0 b\u1ea3ng so s\u00e1nh Cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e9 v\u00e0ng v\u1edbi c\u00e1c thu\u1eadt ng\u1eef t\u01b0\u01a1ng t\u1ef1:<\/p>\n\n\n\n\n\n\n\n
              Thu\u1eadt ng\u1eef<\/th>\nS\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n
              Cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ea5m v\u00e9 v\u00e0ng<\/td>\nKhai th\u00e1c \u0111i\u1ec3m y\u1ebfu trong Kerberos \u0111\u1ec3 truy c\u1eadp tr\u00e1i ph\u00e9p.<\/td>\n<\/tr>\n
              Cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e9 b\u1ea1c<\/td>\nGi\u1ea3 m\u1ea1o phi\u1ebfu d\u1ecbch v\u1ee5 \u0111\u1ec3 truy c\u1eadp t\u00e0i nguy\u00ean tr\u00e1i ph\u00e9p.<\/td>\n<\/tr>\n
              T\u1ea5n c\u00f4ng qua v\u00e9<\/td>\nS\u1eed d\u1ee5ng TGT ho\u1eb7c TGS b\u1ecb \u0111\u00e1nh c\u1eafp \u0111\u1ec3 truy c\u1eadp tr\u00e1i ph\u00e9p.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

              Quan \u0111i\u1ec3m v\u00e0 c\u00f4ng ngh\u1ec7 c\u1ee7a t\u01b0\u01a1ng lai<\/h2>\n

              Khi c\u00f4ng ngh\u1ec7 ph\u00e1t tri\u1ec3n, c\u00e1c m\u1ed1i \u0111e d\u1ecda tr\u00ean m\u1ea1ng c\u0169ng v\u1eady. \u0110\u1ec3 ch\u1ed1ng l\u1ea1i c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e9 v\u00e0ng v\u00e0 c\u00e1c m\u1ed1i \u0111e d\u1ecda li\u00ean quan, c\u00e1c c\u00f4ng ngh\u1ec7 sau c\u00f3 th\u1ec3 tr\u1edf n\u00ean n\u1ed5i b\u1eadt h\u01a1n:<\/p>\n

                \n
              1. \n

                Ki\u1ebfn tr\u00fac Zero Trust<\/strong>: Theo m\u1eb7c \u0111\u1ecbnh, m\u1ed9t m\u00f4 h\u00ecnh b\u1ea3o m\u1eadt kh\u00f4ng tin c\u1eady ng\u01b0\u1eddi d\u00f9ng ho\u1eb7c thi\u1ebft b\u1ecb n\u00e0o, y\u00eau c\u1ea7u x\u00e1c minh danh t\u00ednh v\u00e0 quy\u1ec1n truy c\u1eadp li\u00ean t\u1ee5c.<\/p>\n<\/li>\n

              2. \n

                Ph\u00e2n t\u00edch h\u00e0nh vi<\/strong>: C\u00e1c thu\u1eadt to\u00e1n h\u1ecdc m\u00e1y n\u00e2ng cao x\u00e1c \u0111\u1ecbnh h\u00e0nh vi b\u1ea5t th\u01b0\u1eddng v\u00e0 c\u00e1c d\u1ea5u hi\u1ec7u ti\u1ec1m \u1ea9n c\u1ee7a vi\u1ec7c gi\u1ea3 m\u1ea1o th\u00f4ng tin x\u00e1c th\u1ef1c.<\/p>\n<\/li>\n

              3. \n

                M\u00e3 h\u00f3a n\u00e2ng cao<\/strong>: C\u00e1c ph\u01b0\u01a1ng ph\u00e1p m\u00e3 h\u00f3a m\u1ea1nh h\u01a1n \u0111\u1ec3 b\u1ea3o v\u1ec7 t\u00e0i li\u1ec7u x\u00e1c th\u1ef1c kh\u1ecfi b\u1ecb tr\u00edch xu\u1ea5t d\u1ec5 d\u00e0ng.<\/p>\n<\/li>\n<\/ol>\n

                C\u00e1ch m\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng ho\u1eb7c li\u00ean k\u1ebft v\u1edbi cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e9 v\u00e0ng<\/h2>\n

                C\u00e1c m\u00e1y ch\u1ee7 proxy, ch\u1eb3ng h\u1ea1n nh\u01b0 c\u00e1c m\u00e1y ch\u1ee7 do OneProxy cung c\u1ea5p, \u0111\u00f3ng m\u1ed9t vai tr\u00f2 quan tr\u1ecdng trong b\u1ea3o m\u1eadt m\u1ea1ng. M\u1eb7c d\u00f9 b\u1ea3n th\u00e2n c\u00e1c m\u00e1y ch\u1ee7 proxy kh\u00f4ng li\u00ean quan tr\u1ef1c ti\u1ebfp \u0111\u1ebfn Cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e9 v\u00e0ng nh\u01b0ng ch\u00fang c\u00f3 th\u1ec3 gi\u00fap t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt b\u1eb1ng c\u00e1ch:<\/p>\n

                  \n
                1. \n

                  Thanh tra giao th\u00f4ng<\/strong>: M\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 ki\u1ec3m tra l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng, ph\u00e1t hi\u1ec7n v\u00e0 ch\u1eb7n c\u00e1c ho\u1ea1t \u0111\u1ed9ng \u0111\u00e1ng ng\u1edd.<\/p>\n<\/li>\n

                2. \n

                  Ki\u1ec3m so\u00e1t truy c\u1eadp<\/strong>: M\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 th\u1ef1c thi c\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t truy c\u1eadp, ng\u0103n ch\u1eb7n ng\u01b0\u1eddi d\u00f9ng tr\u00e1i ph\u00e9p truy c\u1eadp v\u00e0o c\u00e1c t\u00e0i nguy\u00ean nh\u1ea1y c\u1ea3m.<\/p>\n<\/li>\n

                3. \n

                  L\u1ecdc<\/strong>: Proxy c\u00f3 th\u1ec3 l\u1ecdc v\u00e0 ch\u1eb7n l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp \u0111\u1ed9c h\u1ea1i, gi\u1ea3m b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng \u0111\u1ec3 c\u00f3 th\u1ec3 khai th\u00e1c.<\/p>\n<\/li>\n<\/ol>\n

                  Li\u00ean k\u1ebft li\u00ean quan<\/h2>\n

                  \u0110\u1ec3 bi\u1ebft th\u00eam th\u00f4ng tin v\u1ec1 Cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e9 v\u00e0ng v\u00e0 c\u00e1c ch\u1ee7 \u0111\u1ec1 li\u00ean quan, h\u00e3y tham kh\u1ea3o c\u00e1c t\u00e0i nguy\u00ean sau:<\/p>\n

                    \n
                  1. MITER ATT&CK \u2013 T\u1ea5m v\u00e9 v\u00e0ng<\/a><\/li>\n
                  2. T\u01b0 v\u1ea5n b\u1ea3o m\u1eadt c\u1ee7a Microsoft v\u1ec1 v\u00e9 v\u00e0ng<\/a><\/li>\n
                  3. Vi\u1ec7n SANS \u2013 Gi\u1ea3i th\u00edch v\u1ec1 cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ea5m v\u00e9 v\u00e0ng<\/a><\/li>\n
                  4. Kho l\u01b0u tr\u1eef Mimikatz GitHub<\/a><\/li>\n<\/ol>\n

                    H\u00e3y nh\u1edb r\u1eb1ng, lu\u00f4n c\u1eadp nh\u1eadt th\u00f4ng tin v\u00e0 ch\u1ee7 \u0111\u1ed9ng l\u00e0 ch\u00eca kh\u00f3a \u0111\u1ec3 b\u1ea3o v\u1ec7 t\u1ed5 ch\u1ee9c c\u1ee7a b\u1ea1n kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda m\u1ea1ng tinh vi nh\u01b0 Cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ea5m v\u00e9 v\u00e0ng. \u0110\u00e1nh gi\u00e1 b\u1ea3o m\u1eadt th\u01b0\u1eddng xuy\u00ean, \u0111\u00e0o t\u1ea1o nh\u00e2n vi\u00ean v\u00e0 \u00e1p d\u1ee5ng c\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t l\u00e0 nh\u1eefng b\u01b0\u1edbc c\u1ea7n thi\u1ebft \u0111\u1ec3 b\u1ea3o v\u1ec7 m\u1ea1ng v\u00e0 d\u1eef li\u1ec7u c\u1ee7a b\u1ea1n.<\/p>","protected":false},"featured_media":477359,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477358","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about Golden Ticket Attack: Unraveling the Dark Secrets of Credential Forgery<\/mark>","faq_items":[{"question":"What is the Golden Ticket Attack, and how does it work?","answer":"

                    The Golden Ticket Attack is a sophisticated cyber attack that exploits weaknesses in Microsoft's Active Directory infrastructure. It allows attackers to forge Kerberos tickets, granting them unauthorized access to a network. Attackers gain administrative access to a domain controller, extract authentication material, and then forge a long-lasting ticket with arbitrary user privileges, providing persistent access to the network.<\/p>"},{"question":"Who discovered the Golden Ticket Attack?","answer":"

                    The Golden Ticket Attack was first discovered and publicly revealed by security researcher Benjamin Delpy in 2014.<\/p>"},{"question":"What are the key features of the Golden Ticket Attack?","answer":"

                    The Golden Ticket Attack offers persistence, elevation of privilege, lateral movement, and stealth. Its long-lasting forged ticket grants attackers prolonged access to the network, allowing them to escalate privileges and move laterally across systems with little trace.<\/p>"},{"question":"Are there different types of Golden Ticket Attacks?","answer":"

                    Yes, there are two primary types. One involves stealing authentication material directly from a domain controller, while the other is an offline attack that extracts the necessary material from backups or domain snapshots.<\/p>"},{"question":"How can organizations defend against Golden Ticket Attacks?","answer":"

                    To mitigate the risk, organizations should implement least-privilege access, regularly monitor network activities, strengthen credential management, and enforce multi-factor authentication (MFA).<\/p>"},{"question":"What is the difference between Golden Ticket Attack, Silver Ticket Attack, and Pass-the-Ticket Attack?","answer":"

                    While all three attacks involve exploiting Kerberos weaknesses, the Golden Ticket Attack forges Kerberos tickets for unauthorized access. The Silver Ticket Attack, on the other hand, forges service tickets, and Pass-the-Ticket Attack uses stolen tickets for unauthorized access.<\/p>"},{"question":"What are the future perspectives and technologies to counter such attacks?","answer":"

                    Technologies like Zero Trust Architecture, behavioral analytics, and enhanced encryption may become prominent to combat Golden Ticket Attacks and related threats in the future.<\/p>"},{"question":"How can proxy servers help in dealing with Golden Ticket Attacks?","answer":"

                    Proxy servers can enhance security by inspecting network traffic, enforcing access controls, and filtering malicious traffic, reducing the attack surface for potential exploits.<\/p>"},{"question":"Where can I find more information about Golden Ticket Attacks?","answer":"

                    For more information about Golden Ticket Attacks and related topics, you can refer to the links provided below:<\/p>

                    1. MITRE ATT&CK - Golden Ticket<\/a><\/li>
                    2. Microsoft Security Advisory on Golden Ticket<\/a><\/li>
                    3. SANS Institute - Golden Ticket Attack Explained<\/a><\/li>
                    4. Mimikatz GitHub Repository<\/a><\/li><\/ol>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/477358","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/477358\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media\/477359"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media?parent=477358"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}