Catalog WADComs

WAD · Tool

Kerbrute

4 techniques Linux · ActiveDirectory · WindowsWADComs GPL-3.0

Kerbrute-BruteForce

Enumeration LinuxActiveDirectoryWindows

ropnop's kerbrute bruteforces and enumerates valid Active Directory accounts through Kerberos Pre-Authentication. The following command will attempt to brute force valid username and passwords logins given a list of credentials (in the format `username:password`). Command Reference: Domain: test.local Credential List: credentials.txt

cat credentials.txt | kerbrute_linux_amd64 -d test.local bruteforce -
Native
Enumeration
Requires
No_Creds
Services
Kerberos

Kerbrute-BruteUser

Enumeration LinuxWindowsActiveDirectory

ropnop's kerbrute bruteforces and enumerates valid Active Directory accounts through Kerberos Pre-Authentication. The following command will bruteforce an account against a list of provided passwords given a username. Command Reference: Domain: test.local Password List: passwords.txt Username: john

kerbrute bruteuser -d test.local passwords.txt john
Native
Enumeration
Requires
Username
Services
Kerberos

Kerbrute-PasswordSpray

Enumeration LinuxWindowsActiveDirectory

ropnop's kerbrute bruteforces and enumerates valid Active Directory accounts through Kerberos Pre-Authentication. The following command will perform a password spray account against a list of provided users given a password. Command Reference: Domain: test.local Username List: domain_users.txt Password: password123

kerbrute passwordspray -d test.local domain_users.txt password123
Native
Enumeration
Requires
Username
Services
Kerberos

Kerbrute-UserEnum

Enumeration LinuxWindowsActiveDirectory

ropnop's kerbrute bruteforces and enumerates valid Active Directory accounts through Kerberos Pre-Authentication. The following command will attempt to enumerate valid usernames given a list of usernames to try. Command Reference: Domain: test.local Username List: usernames.txt

kerbrute userenum -d test.local usernames.txt
Native
Enumeration
Requires
No_Creds
Services
Kerberos