mirror of
https://github.com/NetSPI/PowerHuntShares.git
synced 2025-05-04 19:28:42 +02:00
37 lines
848 B
Plaintext
37 lines
848 B
Plaintext
[libdefaults]
|
|
default_realm = EXAMPLE.COM
|
|
dns_lookup_realm = false
|
|
dns_lookup_kdc = true
|
|
rdns = false
|
|
ticket_lifetime = 24h
|
|
forwardable = yes
|
|
|
|
[realms]
|
|
EXAMPLE.COM = {
|
|
kdc = ad.example.com
|
|
admin_server = ad.example.com
|
|
default_domain = example.com
|
|
}
|
|
|
|
[domain_realm]
|
|
.example.com = EXAMPLE.COM
|
|
example.com = EXAMPLE.COM
|
|
|
|
# Insecure: Exposing credentials in krb5.conf for automated ticket retrieval (NOT recommended)
|
|
[login]
|
|
krb5_get_init_creds_keytab = false
|
|
|
|
# Insecure: Plaintext credentials for AD principal
|
|
[appdefaults]
|
|
kinit = {
|
|
principal = admin@EXAMPLE.COM
|
|
password = P@ssw0rd123
|
|
}
|
|
|
|
pam = {
|
|
debug = false
|
|
ticket_lifetime = 36000
|
|
renew_lifetime = 36000
|
|
forwardable = true
|
|
}
|