Skip to content

live kerberos purge command

skelsec edited this page Apr 14, 2021 · 1 revision

What it does

Removes all tickets from the OS's cache. If LUID is specified then only removes tickets for a given LUID

Remarks

Specify --luid 0 if you wish to purge the tickets for the current user without admin privs.

Requirements

  • You will need administrative access if you try to purge tickets for LUIDS different than yours

Subcommands

None

Switches

  • -o: Writes the TGT to file in KIRBI format
  • --luid : LUID of the user whose tickets to be purged. Use "0x" if you specify a hex value!

Examples

  • pypykatz live kerberos purge: Purges all kerberos tickets.
Clone this wiki locally