AutoPtT

KO | EN

gitlite — search

#javascript #python #hacktoberfest #ai #llm #golang #linux #docker #nodejs #windows #kubernetes #vue #pytorch #ios

(★ 155)

Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. Implemented in C#, C++, Crystal, Python and Rust

File Explorer

Download Latest Version (.zip)

- autoptt.cs
- README.md
- - AutoPtT.cpp
  - AutoPtT.vcxproj
  - AutoPtT.vcxproj.filters
  - AutoPtT.vcxproj.user
- AutoPtT.slnx
- autoptt.cr
- README.md
- autoptt.js
- README.md
- autoptt.py
- README.md
- autoptt.rs
- README.md
README.md

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# AutoPtT

AutoPtT enumerates Kerberos tickets and performs Pass-the-Ticket (PtT) attacks interactively or step by step. It is a standalone alternative to Rubeus or Mimikatz for this attack, implemented in C#, C++, Crystal, Deno (locally or hosting the file remotely), Python and Rust.

You can use the following options:

- **`auto`** - Automated Pass-the-Ticket attack

- **`sessions`** - List logon sessions. Similar to running `klist sessions`

- **`klist`** - List tickets in the current session. Similar to running `klist`

- **`tickets`** - List tickets in all sessions (not only TGTs). Similar to running `Rubeus.exe dump`

- **`export`** - Export a TGT given the LogonId. Similar to running `Rubeus.exe dump`

- **`ptt`** - Import a ticket file given the file name. Similar to running `Rubeus.exe ptt`

<br>

-----------------------------------------------

## Examples

#### Automated Pass-the-Ticket

Choose the index for one of the available TGTs, it gets dumped and imported into your session:

```
autoptt.exe auto
```

![img6](https://raw.githubusercontent.com/ricardojoserf/ricardojoserf.github.io/master/images/autoptt/Screenshot_6.png)

#### List logon sessions

```
autoptt.exe sessions
```

![img1](https://raw.githubusercontent.com/ricardojoserf/ricardojoserf.github.io/master/images/autoptt/Screenshot_1.png)

#### List tickets in the current session

```
autoptt.exe klist
```

![img2](https://raw.githubusercontent.com/ricardojoserf/ricardojoserf.github.io/master/images/autoptt/Screenshot_2.png)

#### List tickets in all sessions

```
autoptt.exe tickets
```

![img3](https://raw.githubusercontent.com/ricardojoserf/ricardojoserf.github.io/master/images/autoptt/Screenshot_3.png)

#### Export TGT given the LogonId (in this case, 0x5f7d0)

```
autoptt.exe export 0x5f7d0
```

![img4](https://raw.githubusercontent.com/ricardojoserf/ricardojoserf.github.io/master/images/autoptt/Screenshot_4.png)

#### Import ticket file given the file name

```
autoptt.exe ptt 0x5f7d0_Administrator.kirbi
```

![img5](https://raw.githubusercontent.com/ricardojoserf/ricardojoserf.github.io/master/images/autoptt/Screenshot_5.png)

<br>

-----------------------------------------------

## Acknowledgments

Heavily inspired by and adapted from:

- [Mimikatz](https://github.com/gentilkiwi/mimikatz) by **Benjamin Delpy** ([@gentilkiwi](https://github.com/gentilkiwi))

- [Rubeus](https://github.com/GhostPack/Rubeus) by **Will Schroeder** ([@harmj0y](https://github.com/harmj0y)) and **Lee Christensen** ([@leechristensen](https://github.com/leechristensen))

- klist utility by **Microsoft**

<br>

AutoPtT

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

AutoPtT

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

Download README