TGSThief
I think a lot of people have seen the project GIUDA . It is an interesting way to get the TGS of a user whose logon session is just present on the computer. The problem is that its code is written in Pascal, so I had to rewrite the project in C++.
How to use:
Just run the tool and select the desired logon session! The tool will automatically escalate privileges and request a TGS.
Advantages:
- We do not need to run the code on behalf of the system. Run the program as a local administrator, the privilege escalation will happen automatically.
- I also added SPN validation through regex, so there is less chance of making a mistake and not getting TGS.
- The TGS ticket is optionally injected into the logon session where the tool is running. The TGS ticket is simply output in base64 for convenience, and only embedded if required.
- It is not necessary to run the tool ten times to see the LUID. You can now select the LUID you want from the drop down list.
Thanks to: @Michaelzhm
Post #930
2.55K
Forwarded from 1N73LL1G3NC3

- 🔥 6
- 👍 3
- ❤🔥 2