> For the complete documentation index, see [llms.txt](https://ad-lab.gitbook.io/building-a-windows-ad-lab/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ad-lab.gitbook.io/building-a-windows-ad-lab/vulnerabilities-and-misconfigurations-and-attacks/active-directory-attacks/delegation-attacks.md).

# Delegation Attacks

* In unconstrained and constrained Kerberos delegation, a computer/user is told what resources it can delegate authentications to.
* In resource based Kerberos delegation, computers (resources) specify who they trust and who can delegate authentications to them.

Here are the articles in this section: