Abusing Resource-Based Constrained Delegation (RBCD) in Active Directory

Active Directory delegation is one of those features that makes complete sense on paper and causes constant headaches in practice. It solves a real problem. It's also misconfigured in almost every env