nidem/kerberoast

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1507 stars · 313 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A collection of Python and PowerShell tools for attacking Microsoft Kerberos implementations, including requesting service tickets, cracking them offline, and rewriting tickets for privilege escalation. It is a well-known Kerberoasting toolkit used in penetration testing and red team engagements.

Use cases

• kerberoast service accounts in active directory
• crack kerberos service tickets offline with a wordlist
• request SPN tickets from a windows domain
• rewrite kerberos tickets to impersonate another user
• escalate privileges by adding a user to domain admins via ticket rewriting
• extract service tickets from memory with mimikatz

When to choose

• you are performing an authorized penetration test or red team engagement against an Active Directory environment
• you need to demonstrate Kerberoasting risk by cracking weak service account passwords
• you want to rewrite and replay Kerberos tickets to test privilege escalation paths

When to avoid

• you need a modern, actively maintained Kerberos attack toolkit with recent protocol support
• you are defending an environment and want detection tooling rather than attack tooling
• you lack authorization to test the target domain - unauthorized use is illegal

Facets

cli-tool · maturity maintenance

security cryptography cli security penetration-testing python windows cli kerberos kerberoasting active-directory red-team penetration-testing ticket-cracking

Member repositories

For agents

markdown · JSON · MCP: product_card(name="nidem/kerberoast")