Kerberos Attack Toolkit Pieces

Kerberos Attack Modules

Individual modules for each Kerberos attack technique in Active Directory:

• AS-REP Roasting — Identifies accounts with Kerberos pre-authentication disabled and requests AS-REP tickets for offline password cracking.
• Kerberoasting — Requests TGS tickets for all accounts with SPNs set and exports hashes in hashcat/john format for offline cracking.
• Silver Ticket — Forges TGS tickets for specific services using a compromised service account NTLM hash, granting access without contacting the Domain Controller.
• Golden Ticket — Forges TGT tickets using the KRBTGT account hash, granting unrestricted domain access with customizable ticket lifetime.
• Delegation Abuse — Exploits unconstrained, constrained, and resource-based constrained delegation configurations to impersonate privileged users.
• Diamond Ticket — Modifies legitimate TGT tickets instead of forging from scratch, evading detections that check for forged PAC signatures.