impacket-ticketconverter

Convert a kirbi ticket to ccache format

$ impacket-ticketConverter [ticket.kirbi] [ticket.ccache]

$ impacket-ticketConverter [ticket.ccache] [ticket.kirbi]

$ impacket-ticketConverter -b [encoded_ticket.txt] [ticket.ccache]

impacket-ticketConverter [-h] [-b] inputfile outputfile

impacket-ticketConverter converts Kerberos authentication tickets between two common formats: ccache (used by UNIX-based tools like Impacket) and kirbi / KRB-CRED (used by Windows tools like Mimikatz). The tool automatically detects the input format by examining the first byte of the file and converts to the opposite format.
This is useful when working across platforms during authorized security assessments, where tickets obtained on Windows need to be used with Linux-based tools or vice versa.

inputfile_

Source ticket file in either kirbi (KRB-CRED) or ccache format. The format is detected automatically.

Destination filename for the converted ticket.

Decode the input ticket from base64 encoding before conversion.

Show help message and exit.

Part of the Impacket toolkit. The tool only converts between ccache and kirbi formats; it does not create, modify, or validate tickets. Requires Python and the Impacket library to be installed. Only for use in authorized security testing contexts.

Impacket was originally developed by SecureAuth and is now maintained by Fortra's Core Security. It is a collection of Python classes for working with network protocols, designed to assist security professionals with penetration testing and security research.

impacket(1), kinit(1), klist(1)