GhostPack/Rubeus

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

5145 stars · 897 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Rubeus is a C# command-line toolset for raw Kerberos interaction and abuse on Windows, adapted from Kekeo and MakeMeEnterpriseAdmin. It supports ticket requests, renewals, Kerberoasting, constrained delegation abuse, and golden/silver/diamond ticket forgery.

Use cases

• request and renew Kerberos TGT and TGS tickets from the command line
• perform Kerberoasting to extract service account ticket hashes
• forge golden, silver, or diamond tickets for Active Directory testing
• abuse constrained delegation with S4U requests
• harvest and extract Kerberos tickets from memory
• perform password spraying against Kerberos
• pass-the-hash and over-pass-the-hash attacks in assessments

When to choose

• you are doing authorized Active Directory security assessments or red team operations
• you need fine-grained, scriptable Kerberos protocol interaction on Windows
• you want a maintained C# alternative to Kekeo

When to avoid

• you need a defensive Kerberos monitoring tool rather than an offensive one
• you are not working in a Windows/Active Directory environment
• you lack authorization to test the target domain

Facets

cli-tool · maturity active

security cryptography cli developer-tools security penetration-testing windows windows dotnet cli kerberos active-directory red-team offensive-security ticket-forgery kerberoasting pass-the-hash

Member repositories

For agents

markdown · JSON · MCP: product_card(name="GhostPack/Rubeus")