Dec0ne/KrbRelayUp

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1657 stars · 210 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

KrbRelayUp is a C# command-line tool that wraps Rubeus and KrbRelay to automate a Kerberos relay-based local privilege escalation in Windows domain environments. It streamlines auth coercion, LDAP relay, RBCD/shadow-credentials abuse, and service creation to obtain NT/SYSTEM.

Use cases

• escalate privileges to SYSTEM on a domain-joined Windows host
• abuse Kerberos relay to LDAP when LDAP signing is not enforced
• perform RBCD-based privilege escalation in Active Directory
• use shadow credentials attack for local privilege escalation
• red team privilege escalation on Windows domain machines

When to choose

• you are doing authorized penetration testing or red teaming in a Windows AD environment
• the target domain does not enforce LDAP signing
• you want a single streamlined tool for the Kerberos relay LPE chain

When to avoid

• you need a defensive or detection tool rather than an offensive one
• LDAP signing is enforced on the domain controllers
• you are not working in a Windows domain environment

Facets

cli-tool · maturity maintenance

security penetration-testing security penetration-testing windows windows cli kerberos ldap-relay privilege-escalation red-team active-directory rbcd shadow-credentials

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Dec0ne/KrbRelayUp")