--- title: "Shadow Credentials Attack" url: https://daily.dev/posts/shadow-credentials-attack-buyj119qa source_url: https://www.hackingarticles.in/shadow-credentials-attack/ type: article source: "Hacking Articles" published: 2025-02-12T17:12:34.944Z updated: 2025-02-12T17:12:49.104Z tags: ["security", "microsoft", "active-directory", "kerberos"] reading_time: 15 upvotes: 2 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Shadow Credentials Attack **[Hacking Articles](https://daily.dev/sources/hackingarticlesin)** · 15 min read · 2 upvotes · 0 comments ## Summary The post explains the Shadow Credentials attack, which exploits Active Directory Certificate Services (AD CS) to inject custom certificates into a user account, allowing attackers persistent access by modifying the msDS-KeyCredentialLink attribute. It provides details on lab setup, various exploitation methods, and mitigation techniques. Additionally, the post covers Kerberos authentication and its PKINIT extension, and lists tools for both exploitation and post-exploitation. Finally, it describes methods for effectively detecting and mitigating these attacks. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#microsoft](https://daily.dev/tags/microsoft), [#active-directory](https://daily.dev/tags/active-directory), [#kerberos](https://daily.dev/tags/kerberos) [View this post on daily.dev](https://daily.dev/posts/shadow-credentials-attack-buyj119qa)