Execute Kerberos attack techniques against Active Directory environments.
npx skills add https://github.com/AeonDave/malskill --skill rubeus
Please help me install this Agent Skill. Skill: rubeus Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/windows/rubeus Command: npx skills add https://github.com/AeonDave/malskill --skill rubeus
This Skill automates various Kerberos-related attacks within Active Directory environments, enabling security professionals to test and exploit Kerberos vulnerabilities.
Use Rubeus to perform Kerberoasting and save the output to a file named hashes.txt.
High-intent search queries and answers about installing and using this skill.
Kerberoasting in Active Directory identifies vulnerable service accounts by requesting and extracting TGS tickets for offline cracking. This Skill automates requesting tickets for SPN-enabled accounts and can save the extracted hashes directly to a file for offline password recovery.
AS-REP roasting targets Kerberos users with pre-authentication disabled, extracting AS-REP messages to crack passwords offline. This Skill automates discovering these vulnerable accounts within Active Directory domains and extracting the encrypted payload for offline analysis.
S4U delegation abuse allows you to impersonate users across services by exploiting constrained or resource-based delegation. This Skill facilitates executing S4U2Self and S4U2Proxy attacks to request tickets on behalf of other users and access restricted target services.
A Windows environment is required to run Kerberos ticket harvesting operations, as the process interacts directly with LSASS memory to dump and monitor active tickets. Specific compilation or binary download is also required for execution.
Pass-the-ticket injects harvested Kerberos tickets into memory for lateral movement, while overpass-the-hash uses password hashes to request new TGTs. This Skill automates both request manipulation and ticket injection techniques for seamless authentication bypass.
Automating Kerberos attacks requires a pre-existing Windows environment and compiling or downloading specific binaries for execution. Operations like dumping tickets from LSASS may trigger endpoint detection systems if proper evasion techniques are not applied.
hypnguyen1209Enumerate Active Directory components and map attack paths with BloodHound.
rahmatullahbossTest Windows Active Directory security with reconnaissance, credential extraction, and Kerberos attacks.
dreadnodeRecover credentials and detect credential-theft tradecraft from Windows memory images with Volatility 3 and YARA.
hardw00tSimulate attacker techniques across internal networks and Active Directory environments.
