ticketer.py

Forges Kerberos tickets (Silver/Golden) from a hash.

Forges Kerberos tickets with impacket. With a service account's hash it creates Silver Tickets for a specific SPN, and with the krbtgt hash, Golden Tickets that grant access to the whole domain.

Family Kerberos & tickets

Flags -nthash -domain-sid -spn

Concepts Silver Ticket, Golden Ticket

Cheatsheet Post-exploitation & lateral

Installation

# All of Impacket's *.py tools ship in the same package:
pipx install impacket
# invoke them as impacket-<tool> or <Tool>.py depending on the packaging

Repositorygithub.com/fortra/impacket

Useful commands4 commands

Appears in

Some machines where its use is documented; not an exhaustive list.

NagoyaProving Grounds Practice