GetUserSPNs.py, impacket-GetUserSPNs: add page (#15881)

* Create getuserspns.py.md

* Create impacket-getuserspns.md

* Update getuserspns.py.md

Trivial mistake.
This commit is contained in:
Machiavelli
2025-03-10 08:57:57 +02:00
committed by GitHub
parent c6720f4313
commit c8d735d549
2 changed files with 34 additions and 0 deletions
+25
View File
@@ -0,0 +1,25 @@
# GetUserSPNs.py
> Retrieve Service Principal Names (SPNs) associated with Active Directory user accounts.
> Part of the Impacket suite.
> More information: <https://github.com/fortra/impacket>.
- Enumerate user accounts with an SPN and request their Kerberos TGS tickets:
`GetUserSPNs.py {{domain}}/{{username}}:{{password}} -dc-ip {{domain_controller_ip}}`
- Use pass-the-hash authentication:
`GetUserSPNs.py {{domain}}/{{username}} -hashes {{LM_Hash}}:{{NT_Hash}} -dc-ip {{domain_controller_ip}}`
- Save the output to a file:
`GetUserSPNs.py {{domain}}/{{username}}:{{password}} -dc-ip {{domain_controller_ip}} -outputfile {{output_file}}`
- Request only TGS tickets:
`GetUserSPNs.py {{domain}}/{{username}}:{{password}} -dc-ip {{domain_controller_ip}} -request`
- Request only TGS tickets using pass-the-hash authentication:
`GetUserSPNs.py {{domain}}/{{username}} -dc-ip {{domain_controller_ip}} -hashes {{LM_Hash}}:{{NT_Hash}} -request`
+9
View File
@@ -0,0 +1,9 @@
# impacket-GetUserSPNs
> This command is an alias of `GetUserSPNs.py`.
> Part of the Impacket suite.
> More information: <https://github.com/fortra/impacket>.
- View documentation for the original command:
`tldr GetUserSPNs.py`