Abusing Delegation with Impacket (Part 2): Constrained Delegation

This technical write-up demonstrates how attackers can abuse Active Directory constrained delegation (with and without protocol transition) to impersonate high-privileged accounts and perform actions like DCSync. It covers S4U2Self/S4U2Proxy workflows, adding/modifying SPNs, SPN hijacking via GenericWrite, and reflective RBCD using Machine Account Quota, providing concrete Impacket command examples and cleanup steps for each attack scenario.