impacket icon indicating copy to clipboard operation
impacket copied to clipboard

Correctly include `authtime` and `etype` in ticket conveter

Open dwelch-r7 opened this issue 2 years ago • 0 comments

Couple of minor changes to the ticket converter, I noticed that authtime was missing and etype was set to 0 on a ticket I was converting to the kirbi format so I've added changes here to pull those out of the ccache credential

Verification steps

  • [ ] Generate a ccache file e.g. ./ticketer.py -nthash <krbtgt/service nthash> -domain-sid <your domain SID> -domain <your domain FQDN> baduser
  • [ ] Convert to kirbi format e.g. ./ticketConverter.py baduser.ccache baduser.kirbi
  • [ ] Check the contents to see that the kirbi file has the same authtime/etype values as the ccache file

dwelch-r7 avatar Sep 11 '22 21:09 dwelch-r7