kirbikator

Description

kirbikator is a little tool to convert Kerberos tickets from different formats to another.
It can be used to inject them in Windows LSA without mimikatz

It is mainly used to convert Golden Tickets, or other various Kerberos tickets from Windows, in a native format on Linux.

Usage

kirbikator {format} ticket1 ticket2 ...

Where {format} is the destination format, this must be one of:

• ccache - MIT Credential Cache - one ticket per file
• ccaches - MIT Credential Cache - all ticket(s) in an unique file
• kirbi - RFC KRB-CRED (#22) - one ticket per file
• kirbis - RFC KRB-CRED (#22) - all ticket(s) in an unique file
• lsa - Microsoft LSA API - Pass-the-Ticket for all ticket(s)

ticket1 ticket2 ... can be in MIT Credential Cache or RFC KRB-CRED (#22) format

Remarks

• ccache & ccaches are designed for MIT Kerberos or Heimdal Kerberos (Linux, Unix, Mac or Windows with a particular Kerberos stack)
• kirbi is designed to be used with mimikatz (Windows NT6 or > version)
• kirbis cannot be used as it is with mimikatz, but is usefull to store multiple tickets
• lsa is only available with Windows NT6 or > version

Examples