gentilkiwi/kekeo
FreeA little toolbox to play with Microsoft Kerberos in C
FreeFree tier
About gentilkiwi/kekeo
kekeo is a C-based toolbox designed for manipulating Microsoft Kerberos protocol, primarily used in security research and penetration testing. It leverages the OSS ASN.1/C commercial library for handling ASN.1 structures and provides binaries that are time-limited (expire December 21, 2017 for the provided pre-built versions). The project is licensed under CC BY-NC-SA 4.0 and includes acknowledgments to contributors like Tom Maddock (MS14-068 discovery), Sylvain Monné (PyKek), and others. Building from source requires a trial or licensed copy of OSS ASN.1/C and Visual Studio.
Key Features
Manipulates Microsoft Kerberos protocol in C
Uses OSS ASN.1/C commercial library for ASN.1 structure handling
Provides pre-built binaries with time-limited validity
Integrates with Visual Studio build environment
Open source under CC BY-NC-SA 4.0 license
Pros & Cons
Pros
- Free and open source
- Allows in-depth experimentation with Microsoft Kerberos
- Comes with pre-built binaries for quick testing
- Actively maintained by experienced security researcher (gentilkiwi)
Cons
- Pre-built binaries have an expiration date (December 21, 2017)
- Building from source requires purchasing or trial of OSS ASN.1/C (commercial library)
- Limited to Windows platform (Visual Studio)
- Documentation is minimal beyond the README
Best For
Security research on Kerberos authenticationPenetration testing of Active Directory environmentsExploit development (e.g., MS14-068 related)Educational experimentation with Kerberos protocol internals
FAQ
What is kekeo?
kekeo is a little toolbox written in C to manipulate Microsoft Kerberos, created by gentilkiwi for security research and fun.
What license does kekeo use?
kekeo is licensed under CC BY-NC-SA 4.0.
Do I need a commercial library to build kekeo?
Yes, building kekeo from source requires OSS ASN.1/C, a commercial library, though a trial version can be used.
Are pre-built binaries available?
Yes, pre-built binaries are provided but they are time-limited (expire December 21, 2017 under the original license).