golden ticket
- noun
- Specialized
:
billete dorado
- The security team discovered a stolen golden ticket that allowed attackers full control of the domain.
Examples
-
A golden ticket allows attackers to impersonate any user.
-
After the breach they found several golden tickets created from a compromised domain controller image.
-
To prevent golden ticket attacks, admins regularly reset the KRBTGT account password and monitor tickets.
-
The hacker created a golden ticket to access the entire network.
-
The security team discovered a stolen golden ticket that allowed attackers full control of the domain.
-
After the breach they found several golden tickets created from a compromised domain controller image.
-
The hacker created a golden ticket to access the entire network.
How Dangerous
- Specialized
- Texting
2
4.2
- Specialized
13
8.5
156
5.1
Surface Forms
Morphology
A B1 learner who knows 'golden' (especially valuable) and 'ticket' (a pass or document granting access) can infer the general idea of a special or very valuable pass that grants access, so the basic notion is predictable from the parts. However, the cybersecurity sense involves technical specifics (a forged Kerberos TGT enabling impersonation and domain-wide access) that are not derivable from the constituents, so the meaning is only partially transparent to non-experts.
Etymology
In computer security, the term golden ticket borrows the picture of a special golden ticket that gives entry to a place. It now means a fake ticket made by attackers that lets them pretend to other users and get 'full access' to a network.