none
Pass the ticket not detected RRS feed

  • Question

  • Hi everybody,

    I've been trying the pass-the-ticket attack for a week now with mimikatz.

    This is my lab :

    • 1 Center
    • 1 Gateway
    • 1DC
    • 1Workstation

    From the worstation, I use the admin ticket. I have access for example to this folder \\dc\admin$. But ATA doesn't detect this scenario. Could someone help me please. 

    Thanks!!

    Monday, October 19, 2015 9:03 AM

Answers

  • Hi,

    Thanks for trying out ATA, with regards to PtT, you should use a stolen ticket on a different machine.
    If you want more information we would love to work with you just contact us via mail: ATAEval at microsoft.com.

    Thanks,

    The ATA Team.

    Monday, October 19, 2015 1:31 PM
    Moderator

All replies