TGT
Ticket Granting Ticket
A Kerberos credential used to request service tickets; targeted by Golden Ticket attacks.
A ticket granting ticket is the credential a Kerberos client receives after initial authentication, then presents to the key distribution center to request service tickets without resubmitting the password. Because it underpins access across the domain, it is a high value target: a Golden Ticket attack forges TGTs using the compromised krbtgt account key, granting persistent domain wide access. Pass the ticket attacks reuse stolen tickets. On the exam, connect the TGT to Kerberos flow and to Golden Ticket and related credential abuse.
Looking TGT up is step one. Getting tested on it is step two.
A free account opens all 4 Domain 1 objectives, 271 exam-style questions with a lesson and a lab on each, a placement check that skips what you already know, and a dated plan. No card.
Not affiliated with or endorsed by CompTIA.