> For the complete documentation index, see [llms.txt](https://red.infiltr8.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://red.infiltr8.io/redteam/credentials/os-credentials/linux/cached-kerberos-tickets.md).

# Linux Cached Kerberos tickets

## Theory

Linux clients can authenticate to Active Directory environments using Kerberos, as can Windows machines. Therfore, Linux client might be **storing different CCACHE tickets inside files. This tickets can be used and abused as any other kerberos ticket**. In order to read this tickets you will need to be the user owner of the ticket or **root** inside the machine.

## Practice

{% content-ref url="/pages/lXIu4ulzYva5Hkk406Y7" %}
[Linux Active Directory](/redteam/privilege-escalation/linux/linux-active-directory.md)
{% endcontent-ref %}

## Resources

{% embed url="<https://book.hacktricks.xyz/linux-hardening/privilege-escalation/linux-active-directory>" %}