CmdID

CmdID / Commands

mimikatz-kerberos

Interact with Kerberos tickets. tldr-pages

On Windows

Opens CmdID with your command. It is read in your browser and sent nowhere.

Windows

from tldr-pages, CC BY 4.0

List current Kerberos tickets

mimikatz "kerberos::list"Identify

Trips 1 Sigma rule: highHackTool - Mimikatz Execution by Teymur Kheirkhabarov, oscd.community, David ANDRE (additional keywords), Tim Shelton

Purge all Kerberos tickets

mimikatz "kerberos::purge"Identify

Trips 1 Sigma rule: highHackTool - Mimikatz Execution by Teymur Kheirkhabarov, oscd.community, David ANDRE (additional keywords), Tim Shelton

Inject a ticket from a .kirbi file

mimikatz "kerberos::ptt ticket.kirbi"Identify

Trips 1 Sigma rule: highHackTool - Mimikatz Execution by Teymur Kheirkhabarov, oscd.community, David ANDRE (additional keywords), Tim Shelton