live kerberos dump command

What it does

Dumps all tickets for all users or for one user is LUID is specified.

Remarks

None

Requirements

• Admin privileges

Subcommands

None

Switches

• -o: Writes the tickets to the specified folder in KIRBI format. The folder must exist!
• --luid : LUID of the user whose tickets to be exported. Use "0x" if you specify a hex value!`

Examples

• pypykatz live kerberos dump: Prints all tickets to the console
• pypykatz live kerberos dump -o tickets: Creates a lot of .kirbi files in a folder called tickets