Training Scenario for Security Testing of the Kerberos Protocol

The paper addresses the security of the Kerberos protocol. It explains the basic principles and the detailed communication flow between systems using the Kerberos. The paper also describes existing security threats, such as ticket attacks and security misconfigurations. Post-exploitation attacks are challenging to detect and administrators of systems utilizing Kerberos should be aware of protection options and their testing capabilities. To facilitate this, we have developed a sandbox environment with a training scenario for hands-on security testing and configuration of the Kerberos authentication protocol.