Rubeus
Windows Kerberos swiss-army knife: request TGT, kerberoast, S4U, pass-the-ticket.
The Windows Kerberos swiss-army knife (C#). It bundles almost all Kerberos abuse into one binary: request and export tickets (asktgt), Kerberoasting and AS-REP roasting, S4U delegation for RBCD, and pass-the-ticket by injecting a TGT into the current session. It's BloodHound's offensive companion once you're on a domain host.
Family Kerberos & tickets
Flags kerberoast asktgt s4u ptt
Concepts Kerberoasting, AS-REP Roasting, Pass-the-Hash, Silver Ticket, Golden Ticket, Pass-the-Ticket, Overpass-the-Hash
Cheatsheet Kerberos
Installation
# Rubeus is C#/.NET: compile in Visual Studio or use a trusted precompiled
# binary (always verify the source):Useful commands
Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.