Golden certificate
Theory
Golden certificates usually refer to one of two types of attacks.
- Forge certificate and sign them with the CA cert private key --> #stolen-ca
- Modify a template and turn it into a SmartCard template --> access-controls.md
Most tools (certsync, certipy) and resources refer to the #stolen-ca technique when mentioning Golden Certificates. Since Golden Tickets consist in Kerberos tickets forged when knowing the KRBTGT keys, it makes sense to call "Golden Certificate" a technique that consists in forging a certificate when knowing the CA private key.
Resources
An introduction to Golden Certificates :: Cyberstoph's blog \u2014 Cyberstoph's Blogcyberstoph.org
Domain Persistence: Golden Certificate Attackwww.hackingarticles.in
Golden Certificate Attack - Persistencesan3ncrypt3d.com
www.youtube.comwww.youtube.com