ropnop/kerbrute

Health v2 · maintenance only

Adoption not part of the score

3452 stars · 494 forks observed · 2026-09-27

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Kerbrute is a Go-based CLI tool for brute-forcing and enumerating valid Active Directory accounts through Kerberos Pre-Authentication. It offers fast username validation, password spraying, and credential brute-forcing against a domain controller without requiring a Kerberos client installation.

Use cases

• enumerate valid active directory usernames via kerberos
• password spray a domain with a single password
• bruteforce a single user's password from a wordlist
• test username:password combos against a domain controller
• find valid ad accounts without triggering event 4625 logs

When to choose

• you need fast kerberos-based username enumeration or password spraying against Active Directory
• you want a single static binary with no Kerberos client dependencies
• stealth matters - pre-auth failures avoid traditional logon failure events

When to avoid

• you need to attack non-Active Directory Kerberos realms
• account lockout policies are strict and you cannot safely control attempt rates
• you need GUI-based or report-generating pentest tooling

Facets

cli-tool · maturity stable

security penetration-testing cli security penetration-testing developer-tools windows cli cross-platform kerberos active-directory password-spraying user-enumeration bruteforce pentesting red-team windows-domain linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ropnop/kerbrute")