You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Dec 6, 2023. It is now read-only.
As I'm going through the new features you added and how could they be used from Windows hosts, I would like to know if you wanted to add a Windows support for the kerberos ticket loading (--kerb and -k).
The thing is you actually rely on impacket's implementation which loads $KRB5CCNAME env variable to find tickets, which is obviously related to the Unix world.
So my point is to allow a user who whould have grabbed tickets with mimikatz to be able to replay them through crackmapexecwin. That link gives the modus operandi:
The attacker should first convert it with kirbikator
The attacker should then use a Unix/linux client to load it: this is the step I want to avoid as I'd like to load it from Windows.
By quickly looking at impacket code, it could be possible to achieve this by calling CCache.loadFile() with a custom Windows path (user specified).
What do you think about ?
I'm aware that this might rather be an impacket issue, so I'll also post it on their github section
Cheers.
The text was updated successfully, but these errors were encountered:
Hello @byt3bl33d3r,
As I'm going through the new features you added and how could they be used from Windows hosts, I would like to know if you wanted to add a Windows support for the kerberos ticket loading (
--kerb
and-k
).The thing is you actually rely on impacket's implementation which loads
$KRB5CCNAME
env variable to find tickets, which is obviously related to the Unix world.So my point is to allow a user who whould have grabbed tickets with mimikatz to be able to replay them through crackmapexecwin. That link gives the modus operandi:
By quickly looking at impacket code, it could be possible to achieve this by calling
CCache.loadFile()
with a custom Windows path (user specified).What do you think about ?
I'm aware that this might rather be an impacket issue, so I'll also post it on their github section
Cheers.
The text was updated successfully, but these errors were encountered: