mirror of
https://github.com/ivuorinen/cheatsheet-tldr.git
synced 2026-02-06 00:44:32 +00:00
35 lines
910 B
Python
35 lines
910 B
Python
---
|
|
syntax: markdown
|
|
tags: [tldr, common]
|
|
source: https://github.com/tldr-pages/tldr.git
|
|
---
|
|
# getTGT.py
|
|
|
|
> Request a Ticket Granting Ticket (TGT).
|
|
> Part of the Impacket suite.
|
|
> More information: <https://github.com/fortra/impacket>.
|
|
|
|
- Request a TGT using a password:
|
|
|
|
`getTGT.py {{domain}}/{{username}}:{{password}}`
|
|
|
|
- Request a TGT using NTLM hashes:
|
|
|
|
`getTGT.py -hashes {{LM_Hash}}:{{NT_Hash}} {{domain}}/{{username}}`
|
|
|
|
- Use Kerberos authentication (from existing ccache, no password needed):
|
|
|
|
`getTGT.py -k -no-pass {{domain}}/{{username}}`
|
|
|
|
- Request a TGT using an AES key (128 or 256 bits):
|
|
|
|
`getTGT.py -aesKey {{aes_key}} {{domain}}/{{username}}`
|
|
|
|
- Specify a domain controller IP:
|
|
|
|
`getTGT.py -dc-ip {{domain_controller_ip}} {{domain}}/{{username}}:{{password}}`
|
|
|
|
- Request a service ticket directly (AS-REQ) for a specific SPN:
|
|
|
|
`getTGT.py -service {{SPN}} {{domain}}/{{username}}:{{password}}`
|