Tickets, Please

TicketsPlease is a ticket/token generation tool suite.

Table of Contents

• Environment Setup
• Modules
  • ldap
  • dcsync
  • ticket
    • How It Works
    • Usage
  • adfs
    • How It Works
    • Usage
  • saml
    • How It Works
    • Usage
  • azure
    • How It Works
    • Usage

---

Environment Setup

Step	Instructions	Command
1	Install the required libraries on the server	apt install libssl-dev wmi-client
2	Install the Python virtual environment module	pip3 install virtualenv
3	Set up a Python virtual environment	virtualenv venv
4	Activate the Python Virtual environment	source venv/bin/activate
5a	Install as a Python package	pip3 install .
5b	Install Python requirements to run independently	pip3 install -r requirements.txt

Modules

This tool leverages two public projects not via pip: FireEye's ADFSpoof and the ticketer.py script from Impacket.

The ticket and adfs modules are based on the blog post via o365blog and the Export-ADFSConfiguration function via AADInternals.

usage: ticketsplease [-h] {ldap,dcsync,ticket,adfs,saml,azure} ...

Tickets, Please: Ticket/Token Generator | v0.1.0

positional arguments:
  {ldap,dcsync,ticket,adfs,saml,azure}
                        Ticket/Token Generation Modules

optional arguments:
  -h, --help            show this help message and exit

See the individual module docs via the Table of Contents.