Kerberos TGS command

What it does

Obtains the TGS (ticket-granting-service) ticket for a given service.

Remarks

None

Requirements

You will need two things:

• Credentials of the user. This credential can be the password or NT hash or secret key RC4/AES128/AES256
• Have the SPN string of the service/user you wish to get the TGS for

Subcommands

None

Switches

• -o: Writes the TGS to file in KIRBI format
• -e --etype: Specifies the requested cipher tpye for ticket encryption. Accepted values: 23, 17, 18

Examples

• pypykatz tgs <kerberos_url> [email protected]: Fetches the TGS ticket for the SPN [email protected]