kerbrute
Enumerates valid domain users via Kerberos.
Enumerates and validates Active Directory users over Kerberos (pre-auth) without generating failed-logon events or risking lockouts. It also does password spraying. Ideal as a first step when you only have a list of candidate names.
Family Active Directory enumeration
Flags userenum -d --dc
Concepts Password Spraying, AS-REP Roasting
Cheatsheet Enumeration
Installation
# precompiled binaries in the repo's Releases sectionUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.