mirror of
https://github.com/tldr-pages/tldr.git
synced 2025-06-08 03:26:02 +02:00
40b4e64363
* impacket*: add missing Dutch translations and improve English pages * Fix tldr-bot issues * Apply suggestions from code review Co-authored-by: Leon <leonvsc@users.noreply.github.com> --------- Co-authored-by: Machiavelli <145562237+MachiavelliII@users.noreply.github.com> Co-authored-by: Leon <leonvsc@users.noreply.github.com>
25 lines
962 B
Markdown
25 lines
962 B
Markdown
# GetUserSPNs.py
|
|
|
|
> Retrieve Service Principal Names (SPNs) associated with Active Directory user accounts.
|
|
> Part of the Impacket suite.
|
|
> More information: <https://github.com/fortra/impacket>.
|
|
|
|
- Enumerate user accounts with an SPN and request their Kerberos TGS tickets:
|
|
|
|
`GetUserSPNs.py {{domain}}/{{username}}:{{password}} -dc-ip {{domain_controller_ip}}`
|
|
|
|
- Use pass-the-hash authentication:
|
|
|
|
`GetUserSPNs.py {{domain}}/{{username}} -hashes {{LM_Hash}}:{{NT_Hash}} -dc-ip {{domain_controller_ip}}`
|
|
|
|
- Save the output to a file:
|
|
|
|
`GetUserSPNs.py {{domain}}/{{username}}:{{password}} -dc-ip {{domain_controller_ip}} -outputfile {{path/to/output_file}}`
|
|
|
|
- Request only TGS tickets:
|
|
|
|
`GetUserSPNs.py {{domain}}/{{username}}:{{password}} -dc-ip {{domain_controller_ip}} -request`
|
|
|
|
- Request only TGS tickets using pass-the-hash authentication:
|
|
|
|
`GetUserSPNs.py {{domain}}/{{username}} -dc-ip {{domain_controller_ip}} -hashes {{LM_Hash}}:{{NT_Hash}} -request`
|