ropnop / kerbrute

A tool to perform Kerberos pre-auth bruteforcing
Apache License 2.0
2.57k stars 415 forks source link

Enumeration Reliability Improvements #49

Open ad0nis opened 2 years ago

ad0nis commented 2 years ago

Modified errors.go to not abort on the wrong domain (this does not necessarily indicate that the domain is invalid for every user, just for that user.)

Also modified errors.go to not abort when an "AS Exchange Error" occurs, as this may indicate 2FA is enabled, based off feedback in #42 .

These two changes are allowing a user enumeration run that was previously erroring out on only a few accounts to proceed unhindered.