gettgtpkinit.py
PKINIT: requests a TGT using a certificate (a step in Shadow Credentials abuse).
A PKINITtools utility that requests a TGT using a certificate instead of a password (PKINIT). It is the second step of the Shadow Credentials abuse: with the added key, you obtain the victim's TGT.
Family Kerberos & tickets
Flags -cert-pfx -pfx-pass <ccache>
Concepts Shadow Credentials
Cheatsheet Kerberos
Installation
pipx install pkinittools
# or clone the repoUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- CertifiedHackTheBox