Impacket describeTicket

Parse and display the contents of a Kerberos ticket (.ccache or .kirbi)

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated April 10, 2026

Tool: impacket-describeTicket
Category: Credential Attacks / Ticket Forgery & Conversion
Platform: linux
Requires: Kerberos ticket
Protocols: KERBEROS

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

impacket-describeTicket '<ticket.ccache>'

Examples

impacket-describeTicket 'administrator.ccache'

Tags

impacket kerberos ticket analysis ccache kirbi

Impacket Diamond Ticket Forge a Diamond Ticket: request a legitimate TGT from the KDC and then patch its PAC…
Impacket getPac Retrieve the PAC (Privilege Attribute Certificate) for a target user via the S4U2self…
Impacket Golden Ticket Forge a Golden Ticket (TGT) using the krbtgt NTLM hash
Impacket Silver Ticket Forge a Silver Ticket (TGS) for a specific service using its NTLM hash
Impacket Ticket Converter Convert Kerberos tickets between kirbi (Windows) and ccache (Linux) formats
Impacket ticketer.py Golden Ticket Forge a Golden Ticket (TGT signed with the krbtgt key) granting any user, any privilege,…