Impacket's getTGT.py requests a Kerberos Ticket-Granting Ticket for a specified domain account using password, NTLM hash, or AES key material and saves the returned ticket as a credential-cache file named <USERNAME>.ccache in the current working directory. Its optional -service mode can request a service ticket directly through an AS exchange.
Python
RESTRICTED_ACCESS_BLUR_MARKER