88 ~ Kerberos

Presence of this port running on a Windows machine within an Active Directory (AD) network will usually be a good indicator of a domain controller (DC) — acting as a Key Distribution Center (KDC).

Related attacks

1. Kerberoasting (TGS-REP roasting)

Kerberoasting (TGS-REP roasting) | Penetration testing & ethical hacking conceptsjarrettgxz-sec.gitbook.io

1. AS-REP roasting

AS-REP roasting | Penetration testing & ethical hacking conceptsjarrettgxz-sec.gitbook.io

1. Pass-the-Ticket and Pass-the-Key/Overpass-the-Hash

Pass-the-Ticket (Kerberos) | Penetration testing & ethical hacking conceptsjarrettgxz-sec.gitbook.io