Pass The Ticket
Last updated
Was this helpful?
Last updated
Was this helpful?
It consists of using a Kerberos TGT or TGS ticket to perform authentication. The tickets are extracted by the LSASS process. Require administrator privileges to extract other people's tickets, otherwise only your own can be extracted.
File [randomvalue]-username@service-domain.kirbi, krbtgt service is TGT ticket.
Uploading ticket on the current session (like it was a cookie)
Uploading ticket on the current session (like it was a cookie)