Tool for managing the Kerberos ticket cache
klist
- C:\Windows\system32\klist.exe /?
Output:
Usage: klist.exe [command]
Command list:
[tickets] [-lh <LogonId.HighPart>] [-li <LogonId.LowPart>]
tgt [-lh <LogonId.HighPart>] [-li <LogonId.LowPart>]
purge [-lh <LogonId.HighPart>] [-li <LogonId.LowPart>]
sessions [-lh <LogonId.HighPart>] [-li <LogonId.LowPart>]
kcd_cache [-lh <LogonId.HighPart>] [-li <LogonId.LowPart>]
get <SPN> [-lh <LogonId.HighPart>] [-li <LogonId.LowPart>]
[-kdcoptions <options>] [-cacheoptions <options>]
add_bind <DOMAIN> <DC>
query_bind
purge_bind
cloud_debug
Return Code: 4294967295
C:\Windows\system32\klist.exe
c:\>ver
Microsoft Windows [Version 10.0.19045.2075]
| File | Info |
|---|---|
| File Size | 81920bytes |
| Creation Time | 2022/09/29 14:53:56 |
| LastWrite Time | 2022/09/29 14:53:56 |
| ProductVersion | 10.0.19041.1 |
| FileVersion | 10.0.19041.1 (WinBuild.160101.0800) |
| Hash | Value |
|---|---|
| MD5 | ea16baf931037daec3c015608b490fec |
| SHA1 | b0221b2a709e40f65cdf35c4ed323b90e9fa6de6 |
| SHA224 | db22083f8dd1a6c7fd9c08a0c298a1d1d3a877e17bb6f5d098ffebfd |
| SHA256 | 64b7cc4d6973e963e045a2142bbba2aca0a81bc4d92b7a5034ed64dc92b1283b |
| SHA384 | 83390cd4a69010e3ca944ed22f957d402918823d51e43db8493e0b84695c82a41ba7aa98bcc58cc1e1305793355ed99f |
| SHA512 | 332c73039483b681add5b0f732e5e7f20bb2a455cd1bc8d091d6acf2cf50664be924c3d4361c921117bee39374c2595850d0170b1da74df2c71b8dffea2dabff |