2
2
An script to perform kerberos bruteforcing by using the Impacket library.
3
3
4
4
When is executed, as input it receives a user or list of users and a password or list of password. Then is performs a brute-force attack to enumerate:
5
- * Valid username/passwords pairs
6
- * Valid usernames
7
- * Usernames without pre-authentication required
5
+ * Valid username/passwords pairs
6
+ * Valid usernames
7
+ * Usernames without pre-authentication required
8
8
9
9
As a result, the script generates a list of valid credentials discovered, and the TGT's generated due those valid credentials.
10
10
11
11
## Installation
12
12
13
13
To install:
14
14
```
15
- > git clone https://github.com/TarlogicSecurity/kerbrute
16
- > cd kerbrute
17
- > pip install -r requirements.txt
15
+ lsgit clone https://github.com/TarlogicSecurity/kerbrute
16
+ cd kerbrute
17
+ pip install -r requirements.txt
18
18
```
19
19
20
20
## Use
21
21
22
22
Help without arguments:
23
23
``` shell
24
+ root@kali:kerbrute# python kerbrute.py
24
25
Impacket v0.9.18 - Copyright 2018 SecureAuth Corporation
25
26
26
27
usage: kerbrute.py [-h] [-debug] (-user USER | -users USERS)
@@ -44,18 +45,16 @@ optional arguments:
44
45
45
46
Examples:
46
47
./kerbrute.py -users users_file.txt -passwords passwords_file.txt -domain contoso.com
47
-
48
48
```
49
49
50
50
Example of execution:
51
51
``` shell
52
- root@kali:impacket-examples # python kerbrute.py -domain jurassic.park -users users.txt -passwords passwords.txt -outputfile jurassic_passwords.txt
53
- Impacket v0.9.19-dev - Copyright 2019 SecureAuth Corporation
52
+ root@kali:kerbrute # python kerbrute.py -domain jurassic.park -users users.txt -passwords passwords.txt -outputfile jurassic_passwords.txt
53
+ Impacket v0.9.18 - Copyright 2018 SecureAuth Corporation
54
54
55
- [* ] Valid user => velociraptor [NOT PREAUTH]
56
- [* ] Valid user => trex
57
- [* ] Valid user => triceratops
58
55
[* ] Stupendous => triceratops:Sh4rpH0rns
59
56
[* ] Saved TGT in triceratops.ccache
57
+ [* ] Valid user => velociraptor [NOT PREAUTH]
58
+ [* ] Valid user => trex
60
59
[* ] Saved discovered passwords in jurassic_passwords.txt
61
60
```
0 commit comments