Pass the ticket not detected RRS feed

  • Question

  • Hi everybody,

    I've been trying the pass-the-ticket attack for a week now with mimikatz.

    This is my lab :

    • 1 Center
    • 1 Gateway
    • 1DC
    • 1Workstation

    From the worstation, I use the admin ticket. I have access for example to this folder \\dc\admin$. But ATA doesn't detect this scenario. Could someone help me please. 


    Monday, October 19, 2015 9:03 AM


  • Hi,

    Thanks for trying out ATA, with regards to PtT, you should use a stolen ticket on a different machine.
    If you want more information we would love to work with you just contact us via mail: ATAEval at


    The ATA Team.

    Monday, October 19, 2015 1:31 PM

All replies