Rubeus

What it is

Rubeus is a free open-source C# toolset for raw Kerberos interaction, maintained as part of GhostPack (github.com/GhostPack/Rubeus, SpecterOps open-source tools). In authorised Active Directory assessments and Hack The Box Academy-style AD labs, it helps operators request, renew, forge and work with Kerberos tickets under explicit rules of engagement.

What it helps with

- Requesting and renewing TGTs and service tickets in scoped AD tests.
- Supporting Kerberoasting, AS-REP roasting and related Kerberos exercises taught in modern AD courses.
- Demonstrating constrained and resource-based constrained delegation abuse paths in lab ranges.
- Complementing BloodHound, Certipy, Mimikatz and Impacket workflows already used in authorised engagements.
- Running as a Windows/.NET tool without a commercial licence for the core BSD-licensed project.
- Helping defenders validate detections for Kerberos attack techniques in purple-team exercises.

Who it's for

Penetration testers, red teamers and AD lab students who need a dedicated Kerberos toolkit for authorised Windows domain assessments as a peer to Mimikatz and Impacket.

Worth knowing

Rubeus is free and open source (BSD 3-Clause). Official repository: github.com/GhostPack/Rubeus; SpecterOps product page: specterops.io/open-source-tools/rubeus. Authorised penetration testing and lab use only.