list
kerberos::list has a similar functionality to klist command without requiring elevated privileges. Unlike sekurlsa::tickets, this module does not interact with LSASS. It has the following command line argument:
  • /export: export the tickets
1
mimikatz # kerberos::list
2
โ€‹
3
[00000000] - 0x00000012 - aes256_hmac
4
Start/End/MaxRenew: 15/11/2021 18:27:08 ; 16/11/2021 04:27:08 ; 17/11/2021 11:41:46
5
Server Name : krbtgt/HACKLAB.LOCAL @ HACKLAB.LOCAL
6
Client Name : m3g9tr0n @ HACKLAB.LOCAL
7
Flags 40e10000 : name_canonicalize ; pre_authent ; initial ; renewable ; forwardable ;
8
โ€‹
9
[00000001] - 0x00000012 - aes256_hmac
10
Start/End/MaxRenew: 15/11/2021 18:47:48 ; 16/11/2021 04:27:08 ; 17/11/2021 11:41:46
11
Server Name : LDAP/DC.hacklab.local/hacklab.local @ HACKLAB.LOCAL
12
Client Name : m3g9tr0n @ HACKLAB.LOCAL
13
Flags 40a50000 : name_canonicalize ; ok_as_delegate ; pre_authent ; renewable ; forwardable ;
Copied!
Last modified 6mo ago
Copy link