Kerberos manipulation library in pure Python.
- Python >= 3.6
asn1crypto: the best Python lib to parse/modify/construct ASN1 data. It is also written in pure Python, so no need to compile anything, just install and use.
This is a library so the main intention is to use it in your code, however the "examples" folder contain a few useful examples to show what this lib is capable of.
ccache2kirbi.pyconverts CCACHE - kerberos cache - file to kirbi files. Kirbi file is supported by mimikatz to perform pass the ticket attacks.
kirbi2ccache.pyconverts a kirbi file, or a directory full of kirbi files into one CCACHE file. This helps users who prefer to use impacket to perform Kerberos ticket related attacks
getTGT.pypolls a Kerberos server for a TGT given that you have some user secrets at your disposal. The TGT will be saved in a CCACHE file. The minimum required "user secret" is either a password OR and NT hash of the user OR the Kerberos AES key of the user.
getTGT.pybut also gets a TGS ticket for a given service from the domain controller.
Install it via either cloning it from GitHub and using
$ git clone https://github.com/skelsec/minikerberos.git $ cd minikerberos $ python3 setup.py install
pip from the Python Package Index (PyPI).
$ pip install minikerberos --user
Consider to use a Python virtual environment.