Sh11td0wn/winrm_kerb_shell

# winrm_kerb_shell ``` Description Ruby script that calls an almost interactive shell via WinRM (TCP/5985) on an Windows machine, relaying on a valid Kerberos ticket. (Very useful with Golden Tickets) ### ATTENTION ### Make sure you have your kerberos ticket properly configured, either setting the KRB5CCNAME variable or copying and renaming it to '/tmp/krb5cc_0' Example: export KRB5CCNAME='/foo/bar/ticket.ccache' or cp -v /foo/bar/ticket.ccache /tmp/krb5cc_0 Also, make sure you can resolve all domain involved names. Usage: ./winrm_kerb_shell.rb [options] Example: ./winrm_kerb_shell.rb -s fooserver.contoso.com -r CONTOSO.COM Obs. Options --server, and --realm are REQUIRED! Options: -h, --help Show this help message -s, --server SERVER The server FQDN. -r, --realm DOMAIN The realm name. (UPPERCASE) *** Do NOT use this for illegal or malicious use *** By running this, YOU are using this program at YOUR OWN RISK. This software is provided "as is", WITHOUT ANY guarantees OR warranty. ```

标签：Kerberos协议, Ruby, WinRM, 安全工具, 知识库, 红队工具, 远程命令执行