Impacket ticketer (silver ticket)

ticketer.py -nthash <service-hash> -domain-sid <sid> -domain <domain> -spn <spn> administrator

Creates a Silver Ticket (TGS) to access a specific service without needing authentication to the DC.

When you have obtained the NTLM hash of a service account (e.g., via Kerberoasting). The Silver Ticket allows access to a specific service (e.g., CIFS, HTTP) without contacting the DC, evading authentication logs.

If the service has recently changed its password. The Silver Ticket is service-specific and does not grant access to the entire domain.