In a Golden Ticket attack, the attacker uses a tool like Mimikatz to extract the KRBTGT's password hash. The attacker can use this hash to encrypt a forged Kerberos TGT, giving it any access or lifetime they choose. The attacker uses the hash to “prove” to the KDC that the ticket is valid.