diff --git a/nxc/protocols/ldap.py b/nxc/protocols/ldap.py
index 8ee2523c..9186684f 100644
--- a/nxc/protocols/ldap.py
+++ b/nxc/protocols/ldap.py
@@ -1027,8 +1027,6 @@ class ldap(connection):
 
              return
 
-
-
         # Building the search filter
         searchFilter = "(&(servicePrincipalName=*)(!(objectCategory=computer)))"
         attributes = [
@@ -1484,5 +1482,3 @@ class ldap(connection):
                 if each_file.startswith(self.output_filename.split("/")[-1]) and each_file.endswith("json"):
                     z.write(each_file)
                     os.remove(each_file)
-
-
diff --git a/nxc/protocols/ldap/kerberos.py b/nxc/protocols/ldap/kerberos.py
index 8057ec0b..8882c362 100644
--- a/nxc/protocols/ldap/kerberos.py
+++ b/nxc/protocols/ldap/kerberos.py
@@ -111,41 +111,22 @@ class KerberosAttacks:
         etype  = enc['etype']
         cipher = enc['cipher'].asOctets()
 
-        if etype == constants.EncryptionTypes.rc4_hmac.value:                  # 23
+        service = spn.split('/')[0]
+        spn_fmt = spn.replace(":", "~")
+
+        if etype == constants.EncryptionTypes.rc4_hmac.value:  # 23
             chk  = hexlify(cipher[:16]).decode()
             data = hexlify(cipher[16:]).decode()
-            entry = "$krb5tgs${}$*{}${}${}*${}${}".format(
-                etype,
-                spn.split('/')[0],
-                realm,
-                spn.replace(":", "~"),
-                chk,
-                data,
-            )
+            entry = f"$krb5tgs${etype}*{service}${realm}${spn_fmt}*${chk}${data}"
 
-        elif etype == constants.EncryptionTypes.aes128_cts_hmac_sha1_96.value: # 17
+        elif etype in (
+            constants.EncryptionTypes.aes128_cts_hmac_sha1_96.value,  # 17
+            constants.EncryptionTypes.aes256_cts_hmac_sha1_96.value,  # 18
+        ):
             chk  = hexlify(cipher[-12:]).decode()
             data = hexlify(cipher[:-12]).decode()
-            entry = "$krb5tgs${}${}${}$*{}*${}${}".format(
-                etype,
-                spn.split('/')[0],
-                realm,
-                spn.replace(":", "~"),
-                chk,
-                data,
-            )
+            entry = f"$krb5tgs${etype}${service}${realm}$*{spn_fmt}*${chk}${data}"
 
-        elif etype == constants.EncryptionTypes.aes256_cts_hmac_sha1_96.value: # 18
-            chk  = hexlify(cipher[-12:]).decode()
-            data = hexlify(cipher[:-12]).decode()
-            entry = "$krb5tgs${}${}${}$*{}*${}${}".format(
-                etype,
-                spn.split('/')[0],
-                realm,
-                spn.replace(":", "~"),
-                chk,
-                data,
-            )
         else:
             self.logger.fail(f"[{spn}] etype {etype} not supported")
             return None