dirkjanm/krbrelayx

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1657 stars · 248 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Python toolkit for abusing Kerberos in Active Directory environments, including Kerberos relaying and unconstrained delegation attacks. It bundles tools like addspn.py for SPN manipulation and dnstool.py for modifying AD-integrated DNS records over LDAP.

Use cases

• abuse unconstrained delegation in active directory
• relay kerberos authentication attacks
• add or remove SPNs on AD accounts via LDAP
• modify active directory integrated DNS records
• capture and relay TGT tickets for privilege escalation
• red team active directory attack toolkit

When to choose

• you are performing authorized penetration tests or red team engagements against Active Directory
• you need to demonstrate Kerberos relaying or delegation abuse risks
• you want to manipulate SPNs or AD DNS records programmatically over LDAP

When to avoid

• you need defensive monitoring rather than offensive tooling
• you are not working with Windows Active Directory environments
• unauthorized use - this is an attack toolkit, not an administration utility

Facets

cli-tool · maturity active

security penetration-testing networking cli security penetration-testing networking python windows cli kerberos active-directory ad-security relay-attacks unconstrained-delegation red-team pentesting impacket ldap dns linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="dirkjanm/krbrelayx")