bas64 ticket.kirbi.64 > ticket.kirbi ticketConverter ticket.kirbi ticket.ccache export KRB5CCNAME=ticket.ccache klist Kerberos very specific with time. If there is a difference like 5-10m in your nmap result. NTP sync your time. Create silver ticket getST