// what it is
Description
Ronnie Flathers' Go tool that uses Kerberos pre-auth to enumerate valid usernames and spray passwords against AD — without triggering account-lockout policies (when used correctly).
// use cases
What people use it for
- Username enumeration via Kerberos
- Low-and-slow password spraying
// commands
The commands you'll type
User enum
$ kerbrute userenum --dc dc.corp.local -d corp.local users.txtPassword spray
$ kerbrute passwordspray --dc dc.corp.local -d corp.local users.txt 'Spring2026!'