Merge pull request #524 from mandiant/package-kerbrute

🤖 Add kerbrute.vm
mandiant · Jul 13, 2023 · 86ad510 · 86ad510
2 parents 6dfb5be + 9b1d343
commit 86ad510
Show file tree

Hide file tree

Showing 3 changed files with 29 additions and 0 deletions.
diff --git a/packages/kerbrute.vm/kerbrute.vm.nuspec b/packages/kerbrute.vm/kerbrute.vm.nuspec
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
+  <metadata>
+    <id>kerbrute.vm</id>
+    <version>1.0.3</version>
+    <authors>ropnop</authors>
+    <description>A tool to quickly bruteforce and enumerate valid Active Directory accounts through Kerberos Pre-Authentication</description>
+    <dependencies>
+      <dependency id="common.vm" />
+    </dependencies>
+  </metadata>
+</package>
diff --git a/packages/kerbrute.vm/tools/chocolateyinstall.ps1 b/packages/kerbrute.vm/tools/chocolateyinstall.ps1
@@ -0,0 +1,10 @@
+$ErrorActionPreference = 'Stop'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'Kerbrute'
+$category = 'Credential Access'
+
+$exeUrl = 'https://github.com/ropnop/kerbrute/releases/download/v1.0.3/kerbrute_windows_amd64.exe'
+$exeSha256 = 'd18aa84b7bf0efde9c6b5db2a38ab1ec9484c59c5284c0bd080f5197bf9388b0'
+
+VM-Install-Single-Exe $toolName $category $exeUrl -exeSha256 $exeSha256 -consoleApp $true
diff --git a/packages/kerbrute.vm/tools/chocolateyuninstall.ps1 b/packages/kerbrute.vm/tools/chocolateyuninstall.ps1
@@ -0,0 +1,7 @@
+$ErrorActionPreference = 'Continue'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'Kerbrute'
+$category = 'Credential Access'
+
+VM-Uninstall $toolName $category