mirror of
https://github.com/tldr-pages/tldr.git
synced 2026-08-28 20:11:19 +08:00
GetUserSPNs.py, impacket-GetUserSPNs: add page (#15881)
* Create getuserspns.py.md * Create impacket-getuserspns.md * Update getuserspns.py.md Trivial mistake.
This commit is contained in:
@@ -0,0 +1,25 @@
|
||||
# GetUserSPNs.py
|
||||
|
||||
> Retrieve Service Principal Names (SPNs) associated with Active Directory user accounts.
|
||||
> Part of the Impacket suite.
|
||||
> More information: <https://github.com/fortra/impacket>.
|
||||
|
||||
- Enumerate user accounts with an SPN and request their Kerberos TGS tickets:
|
||||
|
||||
`GetUserSPNs.py {{domain}}/{{username}}:{{password}} -dc-ip {{domain_controller_ip}}`
|
||||
|
||||
- Use pass-the-hash authentication:
|
||||
|
||||
`GetUserSPNs.py {{domain}}/{{username}} -hashes {{LM_Hash}}:{{NT_Hash}} -dc-ip {{domain_controller_ip}}`
|
||||
|
||||
- Save the output to a file:
|
||||
|
||||
`GetUserSPNs.py {{domain}}/{{username}}:{{password}} -dc-ip {{domain_controller_ip}} -outputfile {{output_file}}`
|
||||
|
||||
- Request only TGS tickets:
|
||||
|
||||
`GetUserSPNs.py {{domain}}/{{username}}:{{password}} -dc-ip {{domain_controller_ip}} -request`
|
||||
|
||||
- Request only TGS tickets using pass-the-hash authentication:
|
||||
|
||||
`GetUserSPNs.py {{domain}}/{{username}} -dc-ip {{domain_controller_ip}} -hashes {{LM_Hash}}:{{NT_Hash}} -request`
|
||||
@@ -0,0 +1,9 @@
|
||||
# impacket-GetUserSPNs
|
||||
|
||||
> This command is an alias of `GetUserSPNs.py`.
|
||||
> Part of the Impacket suite.
|
||||
> More information: <https://github.com/fortra/impacket>.
|
||||
|
||||
- View documentation for the original command:
|
||||
|
||||
`tldr GetUserSPNs.py`
|
||||
Reference in New Issue
Block a user