Rubeus

Active Directory

What it’s for

A Kerberos toolkit for ticket abuse: roasting, pass-the-ticket, and delegation attacks.

Where it shines

  • The go-to for Kerberos tradecraft on Windows
  • Covers the whole ticket lifecycle

Where it falls down

  • Windows/.NET, and heavily signatured by EDR
  • Needs OPSEC care to run quietly

My take

[EDIT ME: your one-line verdict — day-one essential, learn later, or overhyped, in your own words.]

← Back to The Armory