CmdID

CmdID / Commands

getst.py

Request a Kerberos Service Ticket (TGS). tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Request a Kerberos Service Ticket (TGS). Part of the Impacket suite.

Request a service ticket for a specific SPN

getST.py domain/username:password -spn service/targetIdentify

Request a ticket using NTLM hashes (pass-the-hash)

getST.py -hashes LM_Hash:NT_Hash domain/username -spn service/targetIdentify

Request a ticket using existing Kerberos ccache file

getST.py -no-pass -k domain/username -spn service/targetIdentify

Impersonate another user via S4U2Self (requires delegation rights)

getST.py -k -impersonate target_user domain/username -spn service/targetIdentify

Force the ticket to be forwardable (Bronze Bit)

getST.py -force-forwardable -k domain/username -spn service/targetIdentify