provocativo_
back to the arsenal
// arsenal·Post-ExploitAdvancedFOSS

Rubeus

C# toolset for raw Kerberos interaction — kerberoasting, AS-REProasting, ticket abuse.

Post-Exploit

$ rubeus --help

Rubeus

// what it is

Description

Will Schroeder's C# Kerberos-focused toolkit. Performs kerberoasting, AS-REP roasting, Pass-the-Ticket, S4U abuse, and ticket extraction without the noisy LSASS reads Mimikatz needs.

// use cases

What people use it for

  • Kerberoasting from a domain user
  • Pass-the-Ticket
  • AS-REP roasting

// commands

The commands you'll type

Kerberoast

$ Rubeus.exe kerberoast /outfile:tgs.txt

AS-REP roast

$ Rubeus.exe asreproast /outfile:asrep.txt

// facts

category
Post-Exploit
platforms
WIN
license
FOSS
difficulty
Advanced

// links

// related in Post-Exploit

Post-ExploitAdvanced

Mimikatz

Benjamin Delpy's Windows credential-theft Swiss Army knife.

FOSS
WIN
open entry →
Post-ExploitAdvanced

Impacket

SecureAuth (now Fortra) Python toolkit for low-level Windows network protocols.

FOSS
LIN·WIN·MAC
open entry →
Post-ExploitAdvanced

BloodHound

Active Directory attack-path visualizer — graphs the shortest path to Domain Admin.

FOSS
LIN·WIN·MAC
open entry →