Rubeus

asktgt Request a Ticket-Granting-Ticket (TGT) from a hash, key, password, or certificate. Sends raw AS-REQ traffic direc…

asktgs Request service tickets (TGS) using an existing TGT. Builds raw TGS-REQ/TGS-REP traffic. Usage Rubeus.exe asktgs …

renew Renew a TGT before it expires, or auto-renew within the renewal window. Usage Rubeus.exe renew </ticket:<tic…

brute / spray Kerberos-based password brute-forcing or password spraying. Can also be invoked as spray . Usage Rubeus.ex…

s4u Perform S4U2self and/or S4U2proxy constrained delegation abuse. Used to impersonate any user to services an account …

golden / silver / diamond Forge Kerberos tickets. golden forges TGTs, silver forges service tickets (TGS), diamond modif…

ptt / purge / describe Ticket management: inject, remove, and inspect Kerberos tickets. ptt — Pass the Ticket Inject a T…

triage / klist / dump / tgtdeleg / monitor / harvest Ticket extraction and harvesting commands. triage — Quick Ticket Ta…

kerberoast Request service tickets for accounts with SPNs set and output crackable hashes. Replaces SharpRoast. Usage Ru…

asreproast AS-REP roast accounts that don't require Kerberos pre-authentication. Requests AS-REP without supplying pre-a…

Miscellaneous Commands Utility commands: process creation, password change, hash calculation, ticket manipulation. creat…