Back Blackhillsinfosec

Abusing Delegation with Impacket (Part 1): Unconstrained Delegation

Blackhillsinfosec •BHIS • November 5, 2025

In Active Directory exploitation, Kerberos delegation is easily among my top favorite vectors of abuse, and in the years I’ve been learning Kerberos exploitation, I’ve noticed that Impacket doesn’t get nearly as much coverage as tools like Rubeus or Mimikatz.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Exploitation of Kerberos Delegation Using Impacket in Active Directory The articles discuss the exploitation of Kerberos delegation in Active Directory environments, focusing on the use of the Impacket toolkit. Impacket is noted for its lesser coverage compared to other tools like Rubeus and Mimikatz, despite its effectiveness in remote penetration testing without the need for binary deployment on disk. 2 sources 21

Abusing Delegation with Impacket (Part 1): Unconstrained Delegation

The full story

Extracted Entities

Platforms (1)

Tools (3)