Silver Tickets are used to call a specific service and access the system that offers the service.

Silver Tickets are used to call a specific service and access the system that offers the service.

• A. Silver Tickets
• B. Golden Tickets
• C. Combinator Attack
• D. Fingerprint Attack

Answer: (A)

The concept being tested is forging Kerberos tickets to access a specific service. A Silver Ticket is a forged Kerberos service ticket (TGS) created for a particular service on a host, using the credentials of the service account. Presenting this ticket allows you to authenticate to that exact service on that system without reaching the domain’s Key Distribution Center again. This directly matches the idea of “calling a specific service and access[ing] the system that offers the service.” By contrast, a Golden Ticket is a forged Ticket Granting Ticket (TGT) that can be used to access almost any service across the domain, not just one targeted service. The other two options aren’t Kerberos service tickets and don’t describe this targeted access mechanism, so they don’t fit the scenario.

The concept being tested is forging Kerberos tickets to access a specific service. A Silver Ticket is a forged Kerberos service ticket (TGS) created for a particular service on a host, using the credentials of the service account. Presenting this ticket allows you to authenticate to that exact service on that system without reaching the domain’s Key Distribution Center again. This directly matches the idea of “calling a specific service and access[ing] the system that offers the service.”

By contrast, a Golden Ticket is a forged Ticket Granting Ticket (TGT) that can be used to access almost any service across the domain, not just one targeted service. The other two options aren’t Kerberos service tickets and don’t describe this targeted access mechanism, so they don’t fit the scenario.