René's URL Explorer Experiment


Title: GitHub - KFriitz/MyRuby

Open Graph Title: GitHub - KFriitz/MyRuby

X Title: GitHub - KFriitz/MyRuby

Description: Contribute to KFriitz/MyRuby development by creating an account on GitHub.

Open Graph Description: Contribute to KFriitz/MyRuby development by creating an account on GitHub.

X Description: Contribute to KFriitz/MyRuby development by creating an account on GitHub.

Mail addresses
dfm.a@testlab.local
dfm.a@testlab.local
user@domain.com
patsy@testlab.local
dev.ccob@dev.rubeus.ghostpack.local
user@domain.com
dev.ccob@dev.rubeus.ghostpack.local
harmj0y@rubeus.ghostpack.local

Opengraph URL: https://github.com/KFriitz/MyRuby

X: @github

direct link

Domain: patch-diff.githubusercontent.com

route-pattern/:user_id/:repository
route-controllerfiles
route-actiondisambiguate
fetch-noncev2:2efb65ad-157f-26bb-77e4-094f1dfaca19
current-catalog-service-hashf3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-idDFB8:207F52:1C210A9:2647A97:69807696
html-safe-nonce179a0ea0b49c2fb6ae5f7b99cc83f28c1fd56a5aed407846876d586662ae1711
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJERkI4OjIwN0Y1MjoxQzIxMEE5OjI2NDdBOTc6Njk4MDc2OTYiLCJ2aXNpdG9yX2lkIjoiMTk5MTYzMzE0MjE2MjY4MzU0MiIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac5ad0f2825ce47d95d7cc8557aa65a7ba8b0227547ad05dae2a03bd931538197d
hovercard-subject-tagrepository:601783332
github-keyboard-shortcutsrepository,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location//
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/KFriitz/MyRuby
twitter:imagehttps://opengraph.githubassets.com/060c1c6d7dc3daa19beb7af61b2d4e2e0c321859903e3c9b2eab212edb4c9d54/KFriitz/MyRuby
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/060c1c6d7dc3daa19beb7af61b2d4e2e0c321859903e3c9b2eab212edb4c9d54/KFriitz/MyRuby
og:image:altContribute to KFriitz/MyRuby development by creating an account on GitHub.
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None0959b1a93ca48b0c88b3bddbdfd04ca43f388cb1a8293105a28c5ef6e8079db8
turbo-cache-controlno-preview
go-importgithub.com/KFriitz/MyRuby git https://github.com/KFriitz/MyRuby.git
octolytics-dimension-user_id61869865
octolytics-dimension-user_loginKFriitz
octolytics-dimension-repository_id601783332
octolytics-dimension-repository_nwoKFriitz/MyRuby
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id601783332
octolytics-dimension-repository_network_root_nwoKFriitz/MyRuby
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release78307334c66591a8f87f493dd2968126b34961dd
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#start-of-content
https://patch-diff.githubusercontent.com/
Sign in https://patch-diff.githubusercontent.com/login?return_to=https%3A%2F%2Fgithub.com%2FKFriitz%2FMyRuby
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub SparkBuild and deploy intelligent appshttps://github.com/features/spark
GitHub ModelsManage and compare promptshttps://github.com/features/models
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://patch-diff.githubusercontent.com/login?return_to=https%3A%2F%2Fgithub.com%2FKFriitz%2FMyRuby
Sign up https://patch-diff.githubusercontent.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=KFriitz%2FMyRuby
Reloadhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby
Reloadhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby
Reloadhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby
KFriitz https://patch-diff.githubusercontent.com/KFriitz
MyRubyhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby
Notifications https://patch-diff.githubusercontent.com/login?return_to=%2FKFriitz%2FMyRuby
Fork 0 https://patch-diff.githubusercontent.com/login?return_to=%2FKFriitz%2FMyRuby
Star 1 https://patch-diff.githubusercontent.com/login?return_to=%2FKFriitz%2FMyRuby
View license https://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/LICENSE
1 star https://patch-diff.githubusercontent.com/KFriitz/MyRuby/stargazers
0 forks https://patch-diff.githubusercontent.com/KFriitz/MyRuby/forks
Branches https://patch-diff.githubusercontent.com/KFriitz/MyRuby/branches
Tags https://patch-diff.githubusercontent.com/KFriitz/MyRuby/tags
Activity https://patch-diff.githubusercontent.com/KFriitz/MyRuby/activity
Star https://patch-diff.githubusercontent.com/login?return_to=%2FKFriitz%2FMyRuby
Notifications https://patch-diff.githubusercontent.com/login?return_to=%2FKFriitz%2FMyRuby
Code https://patch-diff.githubusercontent.com/KFriitz/MyRuby
Issues 0 https://patch-diff.githubusercontent.com/KFriitz/MyRuby/issues
Pull requests 0 https://patch-diff.githubusercontent.com/KFriitz/MyRuby/pulls
Actions https://patch-diff.githubusercontent.com/KFriitz/MyRuby/actions
Projects 0 https://patch-diff.githubusercontent.com/KFriitz/MyRuby/projects
Security 0 https://patch-diff.githubusercontent.com/KFriitz/MyRuby/security
Insights https://patch-diff.githubusercontent.com/KFriitz/MyRuby/pulse
Code https://patch-diff.githubusercontent.com/KFriitz/MyRuby
Issues https://patch-diff.githubusercontent.com/KFriitz/MyRuby/issues
Pull requests https://patch-diff.githubusercontent.com/KFriitz/MyRuby/pulls
Actions https://patch-diff.githubusercontent.com/KFriitz/MyRuby/actions
Projects https://patch-diff.githubusercontent.com/KFriitz/MyRuby/projects
Security https://patch-diff.githubusercontent.com/KFriitz/MyRuby/security
Insights https://patch-diff.githubusercontent.com/KFriitz/MyRuby/pulse
Brancheshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/branches
Tagshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/tags
https://patch-diff.githubusercontent.com/KFriitz/MyRuby/branches
https://patch-diff.githubusercontent.com/KFriitz/MyRuby/tags
3 Commitshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/commits/master/
https://patch-diff.githubusercontent.com/KFriitz/MyRuby/commits/master/
Rubeushttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/tree/master/Rubeus
Rubeushttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/tree/master/Rubeus
.gitattributeshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/.gitattributes
.gitattributeshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/.gitattributes
.gitignorehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/.gitignore
.gitignorehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/.gitignore
CHANGELOG.mdhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/CHANGELOG.md
CHANGELOG.mdhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/CHANGELOG.md
LICENSEhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/LICENSE
LICENSEhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/LICENSE
README.mdhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/README.md
README.mdhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/README.md
Rubeus.slnhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/Rubeus.sln
Rubeus.slnhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/Rubeus.sln
Rubeus.yarhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/Rubeus.yar
Rubeus.yarhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/blob/master/Rubeus.yar
READMEhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby
Licensehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#rubeus
Benjamin Delpyhttps://twitter.com/gentilkiwi
Kekeohttps://github.com/gentilkiwi/kekeo/
Vincent LE TOUXhttps://twitter.com/mysmartlogon
MakeMeEnterpriseAdminhttps://github.com/vletoux/MakeMeEnterpriseAdmin
Charlie Clarkhttps://twitter.com/exploitph
Ceri Coburnhttps://twitter.com/_EthicalChaos_
Elad Shamirhttps://twitter.com/elad_shamir
Thomas Porninhttps://github.com/pornin
DDerhttps://github.com/pornin/DDer
@SteveSyfuhshttps://twitter.com/SteveSyfuhs
Brucehttps://github.com/dotnet/Kerberos.NET
NtApiDotNethttps://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools/tree/master/NtApiDotNet
@tiraniddohttps://twitter.com/tiraniddo
KerberosRequestorSecurityToken.GetRequesthttps://msdn.microsoft.com/en-us/library/system.identitymodel.tokens.kerberosrequestorsecuritytoken.getrequest(v=vs.110).aspx
@machosechttps://twitter.com/machosec
@harmj0yhttps://twitter.com/harmj0y
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#table-of-contents
Rubeushttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#rubeus
Table of Contentshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#table-of-contents
Backgroundhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#background
Command Line Usagehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#command-line-usage
Opsec Noteshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#opsec-notes
Overviewhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#overview
Weaponizationhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#weaponization
Example: Credential Extractionhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#example-credential-extraction
Example: Over-pass-the-hashhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#example-over-pass-the-hash
Ticket requests and renewalshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#ticket-requests-and-renewals
asktgthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#asktgt
asktgshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#asktgs
renewhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#renew
brutehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#brute
Constrained delegation abusehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#constrained-delegation-abuse
s4uhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#s4u
Ticket Forgeryhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#ticket-forgery
goldenhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#golden
silverhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#silver
diamondhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#diamond
Ticket Managementhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#ticket-management
ptthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#ptt
purgehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#purge
describehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#describe
Ticket Extraction and Harvestinghttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#ticket-extraction-and-harvesting
triagehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#triage
klisthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#klist
dumphttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#dump
tgtdeleghttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#tgtdeleg
monitorhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#monitor
harvesthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#harvest
Roastinghttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#roasting
kerberoasthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#kerberoast
kerberoasting opsechttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#kerberoasting-opsec
Exampleshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#examples
asreproasthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#asreproast
Miscellaneoushttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#miscellaneous
createnetonlyhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#createnetonly
changepwhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#changepw
hashhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#hash
tgssubhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#tgssub
currentluidhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#currentluid
logonsessionhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#logonsession
Compile Instructionshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#compile-instructions
Targeting other .NET versionshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#targeting-other-net-versions
Sidenote: Building Rubeus as a Libraryhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#sidenote-building-rubeus-as-a-library
Sidenote: Running Rubeus Through PowerShellhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#sidenote-running-rubeus-through-powershell
Sidenote Sidenote: Running Rubeus Over PSRemotinghttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#sidenote-sidenote-running-rubeus-over-psremoting
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#background
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#command-line-usage
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#opsec-notes
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#overview
Matt Graeberhttps://twitter.com/mattifestation
Lee Christensenhttps://twitter.com/tifkin_
“Subverting Sysmon”https://i.blackhat.com/us-18/Wed-August-8/us-18-Graeber-Subverting-Sysmon-Application-Of-A-Formalized-Security-Product-Evasion-Methodology.pdf
whitepaperhttps://specterops.io/assets/resources/Subverting_Sysmon.pdf
weaponizationhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#weaponization
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#weaponization
through PowerShellhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#sidenote-running-rubeus-through-powershell
do not releasehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#compile-instructions
libraryhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#sidenote-building-rubeus-as-a-library
added to .NET 4.8https://blogs.msdn.microsoft.com/dotnet/2018/11/28/announcing-net-framework-4-8-early-access-build-3694/
Ryan Cobbhttps://twitter.com/cobbr_io
“Entering a Covenant: .NET Command and Control”https://posts.specterops.io/entering-a-covenant-net-command-and-control-e11038bcf462
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#example-credential-extraction
read handle to LSASShttps://github.com/gentilkiwi/mimikatz/blob/a0f243b33590751a77b6d6f275313a4fe8d42c82/mimikatz/modules/sekurlsa/kuhl_m_sekurlsa.c#L168
GetSystemhttps://github.com/GhostPack/Rubeus/blob/4c9145752395d48a73faf326c4ae57d2c565be7f/Rubeus/lib/Helpers.cs#L55-L107
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#example-over-pass-the-hash
Benjamin Delpyhttps://twitter.com/gentilkiwi
Skip Duckwallhttps://twitter.com/passingthehash
"Abusing Microsoft Kerberos - Sorry you guys don't get it"https://www.slideshare.net/gentilkiwi/abusing-microsoft-kerberos-sorry-you-guys-dont-get-it/18
Kekeohttps://github.com/gentilkiwi/kekeo/
logon type 9 processhttps://github.com/gentilkiwi/mimikatz/blob/3d8be22fff9f7222f9590aa007629e18300cf643/mimikatz/modules/sekurlsa/kuhl_m_sekurlsa.c#L926
patched into the appropriate sectionhttps://github.com/gentilkiwi/mimikatz/blob/a0f243b33590751a77b6d6f275313a4fe8d42c82/mimikatz/modules/sekurlsa/packages/kuhl_m_sekurlsa_kerberos.c#L566-L600
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#ticket-requests-and-renewals
asktgthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#asktgt
asktgshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#asktgs
renewhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#renew
brutehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#brute
preauthscanhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#preauthscan
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#asktgt
MS-KKDCPhttps://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-kkdcp/5bcebb8d-b747-4ee5-9453-428aec1c5c38
https://kdcproxy.exmaple.com/kdcproxyhttps://kdcproxy.exmaple.com/kdcproxy
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#asktgs
MS-KKDCPhttps://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-kkdcp/5bcebb8d-b747-4ee5-9453-428aec1c5c38
https://kdcproxy.exmaple.com/kdcproxyhttps://kdcproxy.exmaple.com/kdcproxy
Key List Requestshttps://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-kile/732211ae-4891-40d3-b2b6-85ebd6f5ffff
goldenhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#golden
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#renew
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#brute
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#preauthscan
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#constrained-delegation-abuse
s4uhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#s4u
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#s4u
Kekeohttps://github.com/gentilkiwi/kekeo/
this posthttp://www.harmj0y.net/blog/activedirectory/s4u2pwnage/
"Wagging the Dog"https://shenaniganslabs.io/2019/01/28/Wagging-the-Dog.html
asktgthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#asktgt
MS-KKDCPhttps://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-kkdcp/5bcebb8d-b747-4ee5-9453-428aec1c5c38
https://kdcproxy.exmaple.com/kdcproxyhttps://kdcproxy.exmaple.com/kdcproxy
Rubeus.exe ptt /ticket:Xhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#ptt
Alberto Solinohttps://twitter.com/agsolino
how the service name (sname) is not protected in the KRB-CRED filehttps://www.coresecurity.com/blog/kerberos-delegation-spns-and-more
herehttps://exploit.ph/revisiting-delegate-2-thyself.html
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#ticket-forgery
goldenhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#golden
silverhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#silver
diamondhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#diamond
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#golden
Key List Requestshttps://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-kile/732211ae-4891-40d3-b2b6-85ebd6f5ffff
herehttps://posts.specterops.io/at-the-edge-of-tier-zero-the-curious-case-of-the-rodc-ef5f1799ca06
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#silver
introducedhttps://support.microsoft.com/en-gb/topic/kb5020805-how-to-manage-kerberos-protocol-changes-related-to-cve-2022-37967-997e9acc-67c5-48e1-8d0d-190269bf4efb
CVE-2022-37967https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37967
asktgshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#asktgs
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#diamond
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#ticket-management
ptthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#ptt
purgehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#purge
describehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#describe
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#ptt
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#purge
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#describe
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#ticket-extraction-and-harvesting
triagehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#triage
klisthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#klist
dumphttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#dump
tgtdeleghttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#tgtdeleg
monitorhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#monitor
harvesthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#harvest
triagehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#triage
klisthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#klist
dumphttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#dump
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#triage
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#klist
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#dump
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#tgtdeleg
@gentilkiwihttps://twitter.com/gentilkiwi
Kekeohttps://github.com/gentilkiwi/kekeo/
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#monitor
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#harvest
monitorhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#monitor
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#roasting
kerberoasthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#kerberoast
asreproasthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#asreproast
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#kerberoast
SharpRoasthttps://github.com/GhostPack/SharpRoast
KerberosRequestorSecurityToken.GetRequest Method()https://msdn.microsoft.com/en-us/library/system.identitymodel.tokens.kerberosrequestorsecuritytoken.getrequest(v=vs.110).aspx
@machosechttps://twitter.com/machosec
opsec tablehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#kerberoasting-opsec
opsec tablehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#kerberoasting-opsec
tgtdeleghttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#tgtdeleg
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#kerberoasting-opsec
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#examples
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#asreproast
ASREPRoasthttps://github.com/HarmJ0y/ASREPRoast/
BouncyCastlehttps://www.bouncycastle.org/
see this posthttps://www.harmj0y.net/blog/activedirectory/roasting-as-reps/
kerberoasthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#kerberoast
Jumbo versionhttps://github.com/magnumripper/JohnTheRipper
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#miscellaneous
createnetonlyhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#createnetonly
changepwhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#changepw
hashhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#hash
tgssubhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#tgssub
currentluidhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#currentluid
logonsessionhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#logonsession
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#createnetonly
ptt /luid:0xA..https://patch-diff.githubusercontent.com/KFriitz/MyRuby#ptt
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#changepw
asktgthttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#asktgt
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#hash
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#tgssub
post on the topichttps://shenaniganslabs.io/2019/01/28/Wagging-the-Dog.html
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#currentluid
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#logonsession
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#compile-instructions
Visual Studio 2019 Community Editionhttps://visualstudio.microsoft.com/vs/community/
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#targeting-other-net-versions
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#sidenote-building-rubeus-as-a-library
ILMergehttps://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=17630
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#sidenote-running-rubeus-through-powershell
https://patch-diff.githubusercontent.com/KFriitz/MyRuby#sidenote-sidenote-running-rubeus-over-psremoting
Sidenote: Running Rubeus Through PowerShellhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby#sidenote-running-rubeus-through-powershell
Readme https://patch-diff.githubusercontent.com/KFriitz/MyRuby#readme-ov-file
View license https://patch-diff.githubusercontent.com/KFriitz/MyRuby#License-1-ov-file
Please reload this pagehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby
Activityhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/activity
1 starhttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/stargazers
1 watchinghttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/watchers
0 forkshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/forks
Report repository https://patch-diff.githubusercontent.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2FKFriitz%2FMyRuby&report=KFriitz+%28user%29
Releaseshttps://patch-diff.githubusercontent.com/KFriitz/MyRuby/releases
Packages 0https://patch-diff.githubusercontent.com/users/KFriitz/packages?repo_name=MyRuby
Please reload this pagehttps://patch-diff.githubusercontent.com/KFriitz/MyRuby
C# 99.9% https://patch-diff.githubusercontent.com/KFriitz/MyRuby/search?l=c%23
YARA 0.1% https://patch-diff.githubusercontent.com/KFriitz/MyRuby/search?l=yara
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.