Kerberos Delegation Abuse — Why Impersonation Breaks AD Security

Kerberos delegation is one of the most dangerous misconfigurations you'll find on an Active Directory assessment — and most admins don't know it's there. In this video, I break down all three types (Unconstrained, Constrained, and RBCD), how attackers exploit each one. If you're doing AD pentests or defending an environment, you need to understand the difference.