kerbrute userenum -d $DOMAIN --dc $DCIP /usr/share/seclists/Usernames/xato-net-10-million-usernames.txt

• Linux
• oscp
• cli
• Kerberos
• CredAccess
• Enumeration

Brute force and enumerate AD accounts through Kerberos pre-auth without locking on userenum

Command: copy

References:

Related commands

• auth_ldap $IP $USER -p $PASSWORD $DOMAIN [-ldap|-ldaps]
• autorecon $IP
• uv run bloodhound.py -u $USER -p $PASSWORD -d $DOMAIN -v --zip -c A...
• bloodyAD --host $IP -d $DOMAIN -u $USER -p $PASSWORD get writable -...
• Certify.exe cas
• certipy find -dc-ip $DCIP -u $USER@$DOMAIN -p $PASSWORD -vulnerable...