Break on ticket capture

2016-09-13 16:59:03 -06:00 · 2016-09-13 16:59:03 -06:00 · 8e41548e65
parent 5ac6c919dd
commit 8e41548e65
1 changed files with 1 additions and 0 deletions
--- a/Recon/PowerView.ps1
+++ b/Recon/PowerView.ps1
@ -1382,6 +1382,7 @@ function Request-SPNTicket {
                    [System.Collections.ArrayList]$Parts = ($TicketHexStream -replace '^(.*?)04820...(.*)','$2') -Split "A48201"
                    $Parts.RemoveAt($Parts.Count - 1)
                    $Parts -join "A48201"
+                    break
                }
            }
        }