Merge pull request #62 from 0xe7/kerberoast

fixing kerberoasting when using TGT to authenticate but not supplying…
GhostPack · Sep 9, 2020 · 0754532 · 0754532
2 parents 8c87623 + f047b1d
commit 0754532
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/Rubeus/lib/Roast.cs b/Rubeus/lib/Roast.cs
@@ -7,6 +7,7 @@
 using System.DirectoryServices;
 using System.DirectoryServices.AccountManagement;
 using System.Collections.Generic;
+using Rubeus.lib.Interop;
 
 namespace Rubeus
 {
@@ -333,6 +334,12 @@ public static void Kerberoast(string spn = "", List<string> spns = null, string
                     }
                 }
 
+                if (TGT != null)
+                {
+                    byte[] kirbiBytes = TGT.Encode().Encode();
+                    LSA.ImportTicket(kirbiBytes, new LUID());
+                }
+
                 DirectoryEntry directoryObject = null;
                 DirectorySearcher userSearcher = null;