Explaining Domain Trust

1)Client —> Ask the Domain Controller a Ticket Granting Ticket

2. Domain Controller —> Reply with Ticket Granting Ticket

3. Client —> Request a Ticket Granting Service from Domain Controller

4. Domain Controller —> Reply with Inter-Realm Ticket Granting Ticket encrypted with (Trust Key)

5. Client —> Request Ticket Granting Service from Forest Root Domain Controller and the Forest Root Only Check if it can decrypt the ticket or not (No Validation On the Service Or The User Or Anything)

6. Forest Root Domain Controller —> Reply with Ticket Granting Service

7. Client —> Provide the Ticket Granting Service for Access

8. Application Server —> Verify and authenticate the user

Now let’s Start Dumping Trust Keys