Kerberos支持安全缓冲区来设置票证的目标SPN,绕过LSASS中的SPN检查。
https://github.com/JustYoomoon/Exploit/blob/main/GS20210617182302.tgz