rubeus2ccache.py
A cool tool to "convert Base64-encoded .kirbi tickets from Rubeus into .ccache files for Impacket".
Ticket conversion
This will save the raw base64 blob as both .kirbi
and .ccache
types:
python3 rubues2ccache.py RAW-BASE64-BLOB kirbi ccache
Example usage after TGT is acquired
nxc smb 192.168.11.0/24 --use-kcache -d domain.com