kerberos-ticket-forging

Forge Golden, Silver, Diamond, and Sapphire Kerberos tickets using key materials.

253|37|Updated Feb 22, 2026
One-click install
npx skills add https://github.com/blacklanternsecurity/red-run --skill kerberos-ticket-forging
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: kerberos-ticket-forging
Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/ad/kerberos-ticket-forging
Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill kerberos-ticket-forging

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill enables the forging of Kerberos tickets, crucial for maintaining domain persistence and escalating privileges within a network environment.

Core Features & Use Cases

  • Ticket Forging: Creates Golden, Silver, Diamond, and Sapphire tickets using various key materials.
  • Persistence & Escalation: Leverages forged tickets to gain or maintain access to domain resources.
  • Use Case: After obtaining the krbtgt hash, use this Skill to forge a Golden Ticket, granting domain-wide administrative access for continued operations.

Quick Start

Use the kerberos-ticket-forging skill to forge a Golden Ticket using the provided krbtgt AES256 key and domain SID.

Frequently Asked Questions about kerberos-ticket-forging

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I forge a Kerberos Golden Ticket for domain persistence?

Kerberos ticket forging is the process of creating forged Golden, Silver, Diamond, or Sapphire tickets to maintain domain persistence and escalate privileges. You need key materials like the krbtgt hash or service account keys to generate valid tickets for domain-wide or service-specific access.

What is the difference between Golden and Silver Kerberos tickets?

Golden Tickets grant domain-wide access using the krbtgt hash, whereas Silver Tickets target specific services using service account keys. This Skill supports forging both types, along with Diamond and Sapphire tickets, to address domain persistence and privilege escalation scenarios.

Can I use Impacket and Rubeus for Kerberos ticket forging?

Yes, Impacket and Rubeus are supported tools for Kerberos ticket forging. This Skill utilizes these tools alongside Mimikatz to forge Golden, Silver, Diamond, and Sapphire tickets using various key materials like krbtgt hashes and service account keys.

How do I create a Diamond or Sapphire Kerberos ticket?

Creating Diamond or Sapphire Kerberos tickets involves using specific key materials with tools like Mimikatz, Impacket, or Rubeus. This Skill supports forging these ticket types to achieve domain persistence and privilege escalation beyond standard Golden and Silver tickets.

What key materials are required to forge Kerberos tickets?

Forging Kerberos tickets requires key materials such as the krbtgt hash for Golden Tickets or service account keys for Silver Tickets. This Skill processes these inputs to generate valid tickets for domain-wide or service-specific access using Impacket, Rubeus, or Mimikatz.