Courses
OffensiveIntermediate
Rubeus Tool Usage
Kerberos abuse and AD attack operations with Rubeus.
8 modules
29 lessons
28 practical tasks
About This Course
Master Rubeus, the essential C# toolkit for Kerberos abuse and Active Directory attack operations. Learn to leverage its comprehensive capabilities for ticket manipulation, credential attacks, delegation exploitation, and domain persistence. Build practical skills for red team engagements targeting Windows Active Directory environments using in-memory Kerberos techniques.
What You'll Learn
- Understand Rubeus architecture and its role in the GhostPack toolkit
- Master Kerberos protocol fundamentals relevant to offensive operations
- Install, compile, and deploy Rubeus in various engagement scenarios
- Enumerate Kerberos tickets, SPNs, delegation configurations, and domain trusts
- Request and manipulate TGTs and service tickets using passwords, hashes, and AES keys
- Perform pass-the-ticket attacks for lateral movement across domain environments
- Execute Kerberoasting and ASREPRoasting attacks to extract crackable credentials
- Exploit unconstrained, constrained, and resource-based constrained delegation
- Forge Golden, Silver, Diamond, and Sapphire tickets for persistence and escalation
- Conduct cross-domain attacks leveraging domain trust relationships
- Apply operational security best practices to evade detection during Kerberos operations
Prerequisites
- Active Directory Fundamentals
- Kerberos authentication basics
- Windows command-line proficiency
- Basic penetration testing concepts
- Understanding of credential-based attacks