renew

Renew a TGT before it expires, or auto-renew within the renewal window.

Usage

Rubeus.exe renew </ticket:<ticket> | /ticket:<file>.kirbi> [/dc:<dc-ip>] [/outfile:<output>] [/ptt] [/autorenew] [/nowrap]

Options

• /ticket:<ticket> — base64 TGT blob or path to .kirbi file
• /dc:<dc-ip> — domain controller FQDN or IP
• /ptt — pass-the-ticket, apply renewed ticket to current session
• /outfile:<output> — save renewed ticket to file
• /autorenew — loop: sleep until endTime-30min, renew, repeat until renew-till window expires
• /nowrap — don't line-wrap base64 output

Examples

# Single renewal, apply to session
Rubeus.exe renew /ticket:<output>.kirbi /ptt

# Auto-renew loop (e.g. keep a long-running TGT alive)
Rubeus.exe renew /ticket:<ticket> /autorenew

# Renew and save to file
Rubeus.exe renew /ticket:<ticket> /outfile:<output> /dc:<dc-ip>

Notes

• TGTs must be renewed before EndTime (not after)
• Renewal is only possible within the RenewTill window
• /autorenew sleeps (endTime - 30 minutes) between each renewal cycle