kerberoasting 话题在 GitHub 上没有填写简介，这里按 Star 数汇总最相关的热门仓库。
Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.
Roast in the Middle
Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADCS ESC1-17, DCSync, ACL abuse, NTLM relay, delegation), with per-technique OPSEC/telemetry notes. Drives netexec, impacket, certipy, bloodyAD, BloodHound CE.
An in-depth guide to help people who are new to penetration testing or red teaming and are looking to gain an overview of the penetration testing process. This guide will focus on both the penetration testing and red team process and contain detailed information.
This is CheatSheet which I used on PJPT exam to fully compromise Domain Controller by doing internal network penentration testing.
Active Directory kerberos attack framworks.
A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening (gMSA, tiering, LLMNR/NetBIOS disabling) with Wazuh SIEM detection rules mapped to MITRE ATT&CK.
Kerberos Attacks From Networks or Domain controller log Perspective through HMAC in exchanges.
内网集权系统渗透测试笔记
Kerberos attack path-ways management
Example of Kerberoasting Honeypot
The Kerberoasting / AD password-audit wordlist I use on engagements: priority-merged HashMob large list + The-Viper-One's kerberoast_pws, order-preserving dedup via rling, paired with OneRuleToRuleThemStill for hashcat. MIT, rebuild-it-yourself recipe.
ACL Pentesting frameworks
Offensive tool for guessing Active Directory credentials via Kerberos
Multi-protocol Active Directory (LDAP, SMB, SAMR) enumerator
Kerberoasting and AS-REP Roasting
Kerberoasting
A golang toolkit for offensive Active Directory CTF/Pentest.
Active Directory attack simulation demonstrating LDAP/SMB enumeration, credential harvesting, lateral movement, Kerberos abuse, Resource-Based Constrained Delegation (RBCD), and Domain Administrator privilege escalation in a TryHackMe lab.
Automatización de la cadena de ataque completa a Active Directory (recon → AS-REP/Kerberoasting → cracking → post-explotación) basada en el OCD AD Attack Mindmap 2025.