kerberos

func AuthenticateUser ¶

func AuthenticateUser(ctx context.Context, target *Target, username, password string, timeout int) (bool, string, error)

AuthenticateUser attempts to authenticate a single user with a password

func EnumerateUsers ¶

func EnumerateUsers(ctx context.Context, target *Target, usernames []string, timeout int) ([]string, []string, error)

EnumerateUsers performs username enumeration against Kerberos Returns a list of valid usernames

func RequestServiceTicket ¶ added in v0.0.80

func RequestServiceTicket(ctx context.Context, generalConfig *kerberosfern.PentestKerberosConfig, serviceTicketConfig *kerberosfern.PentestKerberosServiceTicketConfig) (*kerberosfern.PentestKerberosServiceTicketResult, error)

RequestServiceTicket requests a Kerberos service ticket (supports regular requests, traditional CD, and RBCD)

func RunASRepRoast ¶ added in v0.0.190

func RunASRepRoast(ctx context.Context, generalConfig *kerberosfern.PentestKerberosConfig, roastConfig *kerberosfern.PentestKerberosAsRepRoastConfig) (*kerberosfern.PentestKerberosAsRepRoastResult, error)

RunASRepRoast harvests AS-REP hashes (hashcat mode 18200) for principals with pre-auth disabled.

func RunKerberoast ¶ added in v0.0.190

func RunKerberoast(ctx context.Context, generalConfig *kerberosfern.PentestKerberosConfig, roastConfig *kerberosfern.PentestKerberosKerberoastConfig) (*kerberosfern.PentestKerberosKerberoastResult, error)

RunKerberoast harvests TGS-REP hashes for target SPNs for offline cracking (hashcat modes 13100/19600/19700).

func RunPentest ¶ added in v0.0.154

func RunPentest(ctx context.Context, config *kerberosfern.PentestKerberosConfig) (*kerberosfern.PentestKerberosReport, error)

RunPentest dispatches the requested Kerberos attack action(s) and assembles the report.

The result shape carries a single action's output (via the discriminated Type field) and the per-action functions (RunUserEnum, RequestServiceTicket, etc.) each consume Targets[0] only. Multi-action or multi-target invocations would silently lose data, so the dispatcher rejects them up-front.

func RunUserEnum ¶ added in v0.0.190

func RunUserEnum(ctx context.Context, generalConfig *kerberosfern.PentestKerberosConfig, enumConfig *kerberosfern.PentestKerberosUserEnumConfig) (*kerberosfern.PentestKerberosUserEnumResult, error)

RunUserEnum enumerates valid AD principals via Kerberos AS-REQ error codes (credential-free).

func SprayPasswords ¶

func SprayPasswords(ctx context.Context, target *Target, usernames []string, password string, timeout int, delayMs int) (map[string]bool, []string, error)

SprayPasswords performs password spraying against multiple users

func TestConnection ¶

func TestConnection(ctx context.Context, target *Target, timeout int) error

TestConnection tests connectivity to the Kerberos service