88 ~ Kerberos

Presence of this port running on a Windows machine within an Active Directory (AD) network will usually be a good indicator of a domain controller (DC) — acting as a Key Distribution Center (KDC).

Related attacks

1. Kerberoasting (TGS-REP roasting)

https://jarrettgxz-sec.gitbook.io/penetration-testing-ethical-hacking-concepts/windows-active-directory/exploitation-techniques/kerberoasting-tgs-rep-roastingjarrettgxz-sec.gitbook.io

1. AS-REP roasting

https://jarrettgxz-sec.gitbook.io/penetration-testing-ethical-hacking-concepts/windows-active-directory/exploitation-techniques/as-rep-roastingjarrettgxz-sec.gitbook.io

1. Pass-the-Ticket and Pass-the-Key/Overpass-the-Hash

Pass-the-Ticket (Kerberos) | Penetration testing & ethical hacking conceptsjarrettgxz-sec.gitbook.io