CmdID

CmdID / Commands

gettgt.py

Request a Ticket Granting Ticket (TGT). tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Request a Ticket Granting Ticket (TGT). Part of the Impacket suite.

Request a TGT using a password

getTGT.py domain/username:passwordIdentify

Request a TGT using NTLM hashes

getTGT.py -hashes LM_Hash:NT_Hash domain/usernameIdentify

Use Kerberos authentication (from existing ccache, no password needed)

getTGT.py -k -no-pass domain/usernameIdentify

Request a TGT using an AES key (128 or 256 bits)

getTGT.py -aesKey aes_key domain/usernameIdentify

Specify a domain controller IP

getTGT.py -dc-ip domain_controller_ip domain/username:passwordIdentify

Request a service ticket directly (AS-REQ) for a specific SPN

getTGT.py -service SPN domain/username:passwordIdentify