Password Attacks - Pass the Ticket (PtT) from Linux

30

thank you. finally solved it

31

can you give me a hint i have root access but i can not find the ticket of linux01$ or how to use it to connect to the share

32

please give me more hint i stuck here nearly 3 days

1 Like
35

i’ve done everything this is my 4th day sitting over how to change user to svc_workstations any help would be appreciated. :pray:

36

Hello, I am stuck. please help me man

37

Hello, I am stuck here. please help me

38

Okay so i solved it, just use hydra on a “Password” based list… for svc user.

40

Hey, I’m glad you found another way to find the creds, that’s out the box thinking.

However, it’s important for you to note way to find the pass for user svc_workstations has something to do with using keytabextract.py on a certain .kt file in the .scripts folder.

Cheers

41

Whenever I run the export KRB5CCNAME=‘file location’ I can successfully change my ticket to Julio. However, when I run the Klist I see that my Kerberos ticket is expired. There are only two tickets on the system that I can change to for Julio and the other one doesn’t work.

I was wondering if anyone else was having the same issue and what they did to resolve this.