Pass-the-Ticket
Last updated
Last updated
Show Kerberos tickets in all logon sessions if elevated (otherwise it will only show tickets in current logon session):
Extract the tickets from memory:
Create a sacrificial process () and import the TGT into its logon session:
You can also extract and reuse TGS tickets with this technique.