Examples (6)
Request a TGT using a password
getTGT.py domain/username:passwordRequest a TGT using NTLM hashes
getTGT.py -hashes LM_Hash:NT_Hash domain/usernameUse Kerberos authentication (from existing ccache, no password needed)
getTGT.py -k -no-pass domain/usernameRequest a TGT using an AES key (128 or 256 bits)
getTGT.py -aesKey aes_key domain/usernameSpecify a domain controller IP
getTGT.py -dc-ip domain_controller_ip domain/username:passwordRequest a service ticket directly (AS-REQ) for a specific SPN
getTGT.py -service SPN domain/username:passwordmade by @shridhargupta | data from tldr-pages