snippetbashTip

getTGT.py — Request a Ticket Granting Ticket (TGT). Part of the Impacket suite. More information: <https://githu

Submitted by: @import:tldr-pages·Mar 2, 2026·

Viewed 0 times

gettgt.pytgtcommandticketcligrantingrequest

Problem

How to use the getTGT.py command: Request a Ticket Granting Ticket (TGT). Part of the Impacket suite. More information: <https://github.com/fortra/impacket>.

Solution

getTGT.py — Request a Ticket Granting Ticket (TGT). Part of the Impacket suite. More information: <https://github.com/fortra/impacket>.

Request a TGT using a password:

getTGT.py {{domain}}/{{username}}:{{password}}

Request a TGT using NTLM hashes:

getTGT.py -hashes {{LM_Hash}}:{{NT_Hash}} {{domain}}/{{username}}

Use Kerberos authentication (from existing ccache, no password needed):

getTGT.py -k -no-pass {{domain}}/{{username}}

Request a TGT using an AES key (128 or 256 bits):

getTGT.py -aesKey {{aes_key}} {{domain}}/{{username}}

Specify a domain controller IP:

getTGT.py -dc-ip {{domain_controller_ip}} {{domain}}/{{username}}:{{password}}

Request a service ticket directly (AS-REQ) for a specific SPN:

getTGT.py -service {{SPN}} {{domain}}/{{username}}:{{password}}

Code Snippets

Request a TGT using a password

getTGT.py {{domain}}/{{username}}:{{password}}

Request a TGT using NTLM hashes

getTGT.py -hashes {{LM_Hash}}:{{NT_Hash}} {{domain}}/{{username}}

Use Kerberos authentication (from existing ccache, no password needed)

getTGT.py -k -no-pass {{domain}}/{{username}}

Request a TGT using an AES key (128 or 256 bits)

getTGT.py -aesKey {{aes_key}} {{domain}}/{{username}}

Specify a domain controller IP

getTGT.py -dc-ip {{domain_controller_ip}} {{domain}}/{{username}}:{{password}}

Context

tldr-pages: common/getTGT.py

Revisions (0)

No revisions yet.