ricardojoserf/autopttAutomated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. In C#, C++, Crystal, Python, Rust, Golang, Nim and Deno (Javascript)
AutoPtT enumerates Kerberos tickets and performs Pass-the-Ticket (PtT) attacks interactively or step by step. It is a standalone alternative to Rubeus or Mimikatz for this attack, implemented in C#, C++, Crystal, Python and Rust.
You can use the following options:
auto - Automated Pass-the-Ticket attack
sessions - List logon sessions. Similar to running klist sessions
klist - List tickets in the current session. Similar to running klist
tickets - List tickets in all sessions (not only TGTs). Similar to running Rubeus.exe dump
export - Export a TGT given the LogonId. Similar to running Rubeus.exe dump
ptt - Import a ticket file given the file name. Similar to running Rubeus.exe ptt
Choose the index for one of the available TGTs, it gets dumped and imported into your session:
autoptt.exe auto
autoptt.exe sessions
autoptt.exe klist
autoptt.exe tickets
autoptt.exe export 0x5f7d0
autoptt.exe ptt 0x5f7d0_Administrator.kirbi
Heavily inspired by and adapted from:
Mimikatz by Benjamin Delpy (@gentilkiwi)
Rubeus by Will Schroeder (@harmj0y) and Lee Christensen (@leechristensen)
klist utility by Microsoft