Skip to content

MzHmO/PowershellKerberos

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

12 Commits
 
 
 
 
 
 

Repository files navigation

PowershellKerberos

Some scripts to abuse kerberos using Powershell. Check how to use video (Thanks to @BRIPWN)

Injector.ps1

Small tool for injecting kerberos tickets. Supports two work modes:

  • U can read ticket from kirbi file (1 mode)
  • U can read ticket from b64 (2 mode)

Examples:

.\injector.ps1 1 A:\SSD\Share\ticket.kirbi

.\injector.ps1 2 "doi.....q"

изображение

Dumper.ps1

This tool allows you to dump Kerberos tickets from the LSA cache. Implemented via Add-Type.

If the tool is run as a privileged user, it will automatically obtain NT AUTHORITY\SYSTEM privileges and then dump all tickets. If the tool is run as a non-privileged user, it will only dump tickets from the current logon session.

Examples:

.\dumper.ps1

изображение изображение изображение

About

Some scripts to abuse kerberos using Powershell

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published