active
Kerberoast Lab
A reproducible AD lab that stands up a vulnerable SPN and walks the full Kerberoasting path, from ticket request to offline crack.
- Terraform
- PowerShell
- Docker
// Projects
Projects
Tools and labs built while working something out. Most exist because understanding a mechanism properly meant building the thing that exercises it.
maintained
ticket-inspect
Command-line tool that parses a Kerberos ticket and prints its structure field by field, so the encoding stops being a black box.
- Python
- ASN.1
research
Relay Notes
Ongoing research into NTLM relay preconditions — which signing and channel-binding combinations actually block it, tested rather than assumed.
- Impacket
- Wireshark