Kerberos TGT command

What it does

Obtains the TGT (ticket-granting-ticket) for a given user.

Remarks

None

Requirements

You will need to have the credentials of the user. This credential can be the password or NT hash or secret key RC4/AES128/AES256

Subcommands

None

Switches

• -o: Writes the TGT to file in KIRBI format
• -e --etype: Specifies the requested cipher tpye for ticket encryption. Accepted values: 23, 17, 18

Examples

• pypykatz tgt <kerberos_url>: Fetches the TGT
• pypykatz tgt <kerberos_url> -e 23: Fetches the TGT, with RC4 cipher type -if the DC doesn't support it then you'll get exception-