impacket
impacket copied to clipboard
Correctly include `authtime` and `etype` in ticket conveter
Couple of minor changes to the ticket converter, I noticed that authtime
was missing and etype
was set to 0 on a ticket I was converting to the kirbi format so I've added changes here to pull those out of the ccache credential
Verification steps
- [ ] Generate a ccache file e.g.
./ticketer.py -nthash <krbtgt/service nthash> -domain-sid <your domain SID> -domain <your domain FQDN> baduser
- [ ] Convert to kirbi format e.g.
./ticketConverter.py baduser.ccache baduser.kirbi
- [ ] Check the contents to see that the kirbi file has the same authtime/etype values as the ccache file