TimeSync: obtain hash using MS-SNTP for user accounts
TimeSync
Tool to obtain hash using MS-SNTP for user accounts
Requirements
- Python 3.x
ldap3
library for LDAP operations
Installations
-
Clone the repository:
git clone https://github.com/yourusername/timeroast.git
cd timeroast -
Install the required Python packages:
pip install .
Use
timesync -u <username> -p <password> -d <domain> -H <ntlm_hash> -t <target_user>
-u
,--username
: Username for authentication (required)-p
,--password
: Password for authentication (required)-d
,--domain
: Domain name (required)-H
,--hash
: NTLM hash for Pass-the-Hash authentication-t
,--target
: Target user or group to query--dc-ip
: IP address of the domain controller to avoid DNS resolution issues
Example
Extract hash for user test in domain test.local
timesync -u test -p test -d test.local -t test

Extract all hashes for users in group group1 with verbosity
timesync -u test -p test -d test.local -t group1 -v
Extract all hashes for users in domain test.local
timesync -u test -p test -d test.local
