Impacket GetUserSPNs output (simulado)
ServicePrincipalName   Name          PasswordLastSet
HTTP/backup.hacklabs   svc_backup    2025-11-02

$krb5tgs$23$*svc_backup$HACKLABS.LOCAL$HTTP/backup.hacklabs*$7f3a9c...
Cracked password: B4ckup_2024!
Admin ticket: krb5-adm-7f3a9c
Hint: usa el ticket en /prolabs/ad/share/ADMIN$?ticket=<ticket>