list

kerberos::list has a similar functionality to klist command without requiring elevated privileges. Unlike sekurlsa::tickets, this module does not interact with LSASS. It has the following command line argument:
/export: export the tickets
mimikatz # kerberos::list
​
[00000000] - 0x00000012 - aes256_hmac
   Start/End/MaxRenew: 15/11/2021 18:27:08 ; 16/11/2021 04:27:08 ; 17/11/2021 11:41:46
   Server Name       : krbtgt/HACKLAB.LOCAL @ HACKLAB.LOCAL
   Client Name       : m3g9tr0n @ HACKLAB.LOCAL
   Flags 40e10000    : name_canonicalize ; pre_authent ; initial ; renewable ; forwardable ;
​
[00000001] - 0x00000012 - aes256_hmac
   Start/End/MaxRenew: 15/11/2021 18:47:48 ; 16/11/2021 04:27:08 ; 17/11/2021 11:41:46
   Server Name       : LDAP/DC.hacklab.local/hacklab.local @ HACKLAB.LOCAL
   Client Name       : m3g9tr0n @ HACKLAB.LOCAL
   Flags 40a50000    : name_canonicalize ; ok_as_delegate ; pre_authent ; renewable ; forwardable ;
hash
ptc
Last modified 1yr ago