1
0
Fork 0
mirror of https://github.com/tldr-pages/tldr.git synced 2025-07-23 10:55:25 +02:00

GetUserSPNs.py, impacket-GetUserSPNs: add page (#15881)

* Create getuserspns.py.md

* Create impacket-getuserspns.md

* Update getuserspns.py.md

Trivial mistake.
This commit is contained in:
Machiavelli 2025-03-10 08:57:57 +02:00 committed by GitHub
parent c6720f4313
commit c8d735d549
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 34 additions and 0 deletions

View file

@ -0,0 +1,25 @@
# GetUserSPNs.py
> Retrieve Service Principal Names (SPNs) associated with Active Directory user accounts.
> Part of the Impacket suite.
> More information: <https://github.com/fortra/impacket>.
- Enumerate user accounts with an SPN and request their Kerberos TGS tickets:
`GetUserSPNs.py {{domain}}/{{username}}:{{password}} -dc-ip {{domain_controller_ip}}`
- Use pass-the-hash authentication:
`GetUserSPNs.py {{domain}}/{{username}} -hashes {{LM_Hash}}:{{NT_Hash}} -dc-ip {{domain_controller_ip}}`
- Save the output to a file:
`GetUserSPNs.py {{domain}}/{{username}}:{{password}} -dc-ip {{domain_controller_ip}} -outputfile {{output_file}}`
- Request only TGS tickets:
`GetUserSPNs.py {{domain}}/{{username}}:{{password}} -dc-ip {{domain_controller_ip}} -request`
- Request only TGS tickets using pass-the-hash authentication:
`GetUserSPNs.py {{domain}}/{{username}} -dc-ip {{domain_controller_ip}} -hashes {{LM_Hash}}:{{NT_Hash}} -request`

View file

@ -0,0 +1,9 @@
# impacket-GetUserSPNs
> This command is an alias of `GetUserSPNs.py`.
> Part of the Impacket suite.
> More information: <https://github.com/fortra/impacket>.
- View documentation for the original command:
`tldr GetUserSPNs.py`