Research Update Enhanced src/network-services-pentesting/pen...

[carlospolop]

🤖 Automated Content Update

This PR was automatically generated by the HackTricks News Bot based on a technical blog post.

📝 Source Information

• Blog URL:
• Blog Title: Research Update: Enhanced src/network-services-pentesting/pentesting-kerberos-88/harvesting-tickets-from-linux.md
• Suggested Section: Research

🎯 Content Summary

Research Update for src/network-services-pentesting/pentesting-kerberos-88/harvesting-tickets-from-linux.md

This PR contains automated research updates including:

• Latest security vulnerabilities and attack vectors
• Updated techniques and tools
• Enhanced explanations and examples
• Additional references and resources

Generated by: HackTricks Research Agent
Timestamp: 2025-12-26 01:47:18 UTC

This update was generated through automated security research to keep HackTricks con...

🔧 Technical Details

Research update for HackTricks content

🤖 Agent Actions

Summary of updates:

• Expanded the “Credential Storage in Linux” section with modern cache backends (DIR, KEYRING, KCM, MEMORY) and guidance on extracting KRB5CCNAME from /proc to identify storage targets.
• Added a new “Enumerating Active Caches” section plus multiple extraction subsections covering manual keyring dumping, file/DIR cache theft, and detailed SSSD KCM harvesting workflows (including kcm_ctl usage and offline database extraction).
• Introduced a “Ticket Extraction Tooling” section that keeps the Tickey content and adds kerbtool usage examples for converting and reusing stolen caches.
• Augmented the References section with the SSSD KCM design page and the kerbtool repository to support the new material.

Let me know if you’d like additional coverage (e.g., automated memory scraping or cross-realm tradecraft) and I can extend the page further.

---

This PR was automatically created by the HackTricks Feed Bot. Please review the changes carefully before merging.

[carlospolop]

🔗 Additional Context

Original Blog Post:

Content Categories: Based on the analysis, this content was categorized under "Research".

Repository Maintenance:

• MD Files Formatting: 935 files processed

Review Notes:

• This content was automatically processed and may require human review for accuracy
• Check that the placement within the repository structure is appropriate
• Verify that all technical details are correct and up-to-date
• All .md files have been checked for proper formatting (headers, includes, etc.)

Bot Version: HackTricks News Bot v1.0

[carlospolop]

merge