getST.py
S4U tickets for delegation (RBCD/constrained) in impacket.
An impacket tool that requests S4U (Service-for-User) service tickets. It is the engine behind delegation abuses: constrained delegation and, above all, RBCD, impersonating an administrator against a target service.
Family Kerberos & tickets
Flags -spn -impersonate -dc-ip
Concepts RBCD (Resource-Based Constrained Delegation)
Cheatsheet ACL / DACL abuse
Installation
# All of Impacket's *.py tools ship in the same package:
pipx install impacket
# invoke them as impacket-<tool> or <Tool>.py depending on the packagingUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- SupportHackTheBox