Skip to content
Kerberos manipulation library in pure Python
Python
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
minikerberos
tests
.gitignore
LICENSE
README.md
setup.py

README.md

minikerberos

Kerberos manipulation library in pure Python.

Prerequisites

  • Python >= 3.6
  • asn1crypto: the best Python lib to parse/modify/construct ASN1 data. It is also written in pure Python, so no need to compile anything, just install and use.

Usage

This is a library so the main intention is to use it in your code, however the "examples" folder contain a few useful examples to show what this lib is capable of.

  • ccache2kirbi.py converts CCACHE - kerberos cache - file to kirbi files. Kirbi file is supported by mimikatz to perform pass the ticket attacks.

  • kirbi2ccache.py converts a kirbi file, or a directory full of kirbi files into one CCACHE file. This helps users who prefer to use impacket to perform Kerberos ticket related attacks

  • getTGT.py polls a Kerberos server for a TGT given that you have some user secrets at your disposal. The TGT will be saved in a CCACHE file. The minimum required "user secret" is either a password OR and NT hash of the user OR the Kerberos AES key of the user.

  • getTGS.py same as getTGT.py but also gets a TGS ticket for a given service from the domain controller.

Installation

Install it via either cloning it from GitHub and using

$ git clone https://github.com/skelsec/minikerberos.git
$ cd minikerberos
$ python3 setup.py install

or with pip from the Python Package Index (PyPI).

$ pip install minikerberos --user

Consider to use a Python virtual environment.

You can’t perform that action at this time.