# Lateral Movement

> Reuse ccache files and keytabs on Linux to move laterally in AD

- **URL:** https://hackindex.io/services/kerberos/lateral-movement
- **Service:** [Kerberos](https://hackindex.io/services/kerberos.md)
- **Tags:** pivoting, movement, network
- **Published:** 2026-03-16
- **Updated:** 2026-03-29

Kerberos lateral movement leverages obtained tickets and keying material to access other systems in the domain. This includes pass-the-ticket attacks, stealing ccache files from compromised hosts, reusing keytabs found on disk, and converting between ticket formats for cross-tool compatibility.

The subpages detail each technique for moving laterally through a Kerberos-authenticated environment without triggering password-based detection.

## Guides

- [Kerberos Ticket Reuse from Linux](https://hackindex.io/services/kerberos/lateral-movement/kerberos-ticket-reuse-from-linux.md): Exploiting cached Kerberos tickets on Linux via ccache files and keytabs to authenticate as other users and move laterally across AD environments.