ropnop / kerbrute

A tool to perform Kerberos pre-auth bruteforcing
Apache License 2.0
2.57k stars 415 forks source link

Typo #37

Open Luxano-IT opened 3 years ago

Luxano-IT commented 3 years ago

Under Use in README.md you wrote "Kerbrute has three main commands:" but you list four. bruteuser - Bruteforce a single user's password from a wordlist bruteforce - Read username:password combos from a file or stdin and test them passwordspray - Test a single password against a list of users userenum - Enumerate valid domain usernames via Kerberos

dfdalamar commented 3 years ago

Oh those options have been removed.

./kerbrute -h Impacket v0.9.24.dev1+20210618.54810.11f43043 - Copyright 2021 SecureAuth Corporation

usage: kerbrute [-h] [-debug] (-user USER | -users USERS) [-password PASSWORD | -passwords PASSWORDS] -domain DOMAIN [-dc-ip ] [-threads THREADS] [-outputfile OUTPUTFILE] [-outputusers OUTPUTUSERS] [-no-save-ticket]

optional arguments: -h, --help show this help message and exit -debug Turn DEBUG output ON -user USER User to perform bruteforcing -users USERS File with user per line -password PASSWORD Password to perform bruteforcing -passwords PASSWORDS File with password per line -domain DOMAIN Domain to perform bruteforcing -dc-ip IP Address of the domain controller -threads THREADS Number of threads to perform bruteforcing. Default = 1 -outputfile OUTPUTFILE File to save discovered user:password -outputusers OUTPUTUSERS File to save discovered users -no-save-ticket Do not save retrieved TGTs with correct credentials

./kerbrute userenum -domain X.local -users user.txt Impacket v0.9.24.dev1+20210618.54810.11f43043 - Copyright 2021 SecureAuth Corporation

usage: kerbrute [-h] [-debug] (-user USER | -users USERS) [-password PASSWORD | -passwords PASSWORDS] -domain DOMAIN [-dc-ip ] [-threads THREADS] [-outputfile OUTPUTFILE] [-outputusers OUTPUTUSERS] [-no-save-ticket] kerbrute: error: unrecognized arguments: userenum

joaociocca commented 1 year ago

This is weird. Came looking for this while checking THM Attacktive Directory room, downloaded the latest release 1.0.3, and the userenum command worked just fine.

image