[X] KRB-ERROR (7) : KDC_ERR_S_PRINCIPAL_UNKNOWN

[protrading104]

any idea why it didn't work ?

[wh0amitz]

Please read my READMD.md carefully, the poc applies to service account promotion to system. Because in a Windows domain environment, SYSTEM, NT AUTHORITY\NETWORK SERVICE, and Microsoft virtual accounts are all used as domain-joined system computer accounts for authentication. Your KDC_ERR_S_PRINCIPAL_UNKNOWN error is obviously because the KDC cannot find the SPN. This is because you are not using a service account but a user account, and the user account does not have an SPN by default.

[Scorpiobaobao]

你这个跟krbrealayup有什么区别