Impacket getST Creds

Impacket’s getST.py will request a Service Ticket and save it as ccache. If the account has constrained delegation privileges, you can use the -impersonate flag to request a ticket on behalf of another user. The following command will impersonate the Administrator account and request a Service Ticket on its behalf for the www service on host server01.test.local.

Command Reference:

Target IP: 10.10.10.1

Domain: test.local

Service: www

Host Name: server01.test.local

Username: john

Password: password123

Impersonated User: Administrator