Kerbrute

What it does

Kerbrute quickly enumerates valid AD usernames and performs low-noise password spraying via Kerberos pre-authentication. It's a common way to find a first valid credential.

Common use cases

• •Enumerate valid Active Directory usernames without any domain credentials.
• •Perform low-and-slow password spraying through Kerberos to avoid Windows event-log alerts.
• •Test for reused passwords across a known user list by spraying one password at a time.

Key features

• •Enumerates valid users by observing Kerberos AS-REP error-code differences.
• •Supports user enumeration, password spraying, and brute-force attack modes.
• •Written in Go for cross-platform deployment on Linux, macOS, and Windows.
• •Generates logon events only — no Windows audit logs triggered on SMB or RDP.

Source