gentilkiwi/kekeo

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1521 stars · 222 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

kekeo is a C-based command-line toolbox for manipulating Microsoft Kerberos, from the author of mimikatz. It supports operations like ticket requesting, renewal, and constrained delegation abuse for security testing.

Use cases

• request and renew kerberos tickets on windows
• test kerberos constrained delegation in active directory
• red team kerberos abuse testing
• manipulate microsoft kerberos from the command line
• security assessment of active directory authentication

When to choose

• you need fine-grained Kerberos ticket manipulation on Windows for authorized security testing
• you are assessing Active Directory delegation attacks
• you want a lightweight C tool without heavy dependencies

When to avoid

• you need a maintained tool with permissive licensing - the repo has no license and depends on a commercial ASN.1 library
• you want an out-of-the-box build - it requires an OSS ASN.1/C license to compile
• you need cross-platform support - it targets Windows only

Facets

cli-tool · maturity maintenance

security cryptography cli developer-tools security penetration-testing windows windows cli cpp kerberos active-directory red-team pentesting mimikatz-family c

Member repositories

For agents

markdown · JSON · MCP: product_card(name="gentilkiwi/kekeo")