PKINITtools

Overview

PKINITtools is a set of tools designed for Kerberos PKINIT and relaying attacks in Active Directory Certificate Services (AD CS) environments. These tools are valuable for both offensive security testing and understanding potential vulnerabilities in AD CS implementations.

GitHub
Key Features
  • Perform Kerberos PKINIT authentication
  • Execute relay attacks in AD CS environments
  • Exploit vulnerabilities related to certificate-based authentication
  • Assist in identifying misconfigurations in AD CS deployments

Advertisement Placeholder

Usage Example

Here's a basic example of how to use PKINITtools for a PKINIT authentication:

python3 gettgtpkinit.py -cert-pfx <path_to_pfx> -pfx-pass <pfx_password> <domain>/<user> <ccache_file>

This command performs a PKINIT authentication using a certificate and saves the resulting Kerberos ticket to a ccache file.