kerberoast-attack

该技能不是普通开发辅助文档，而是面向 AI 代理的完整 Active Directory 攻击手册。其能力与宣称用途一致，但用途本身就是进攻性安全操作；它指导代理处理真实域凭据、请求票据、离线破解并实施后续提权与横向移动，因此应归类为高风险的攻击技能，而非恶意植入型 malware。

The fragment is an offensive Active Directory and Kerberos tradecraft guide. It provides actionable procedures for credential harvesting, password cracking, privilege escalation, ticket forgery, Administrator impersonation, RBCD, secretsdump, and detection evasion. It is not executable package malware in the supplied form, but its operational guidance presents a high security risk if included in or distributed with software intended for unauthorized use.

未发现恶意软件代码、混淆代码、后门、数据外传或系统破坏行为。该内容是面向 Kerberos 票据离线破解的操作指南，包含定向信息收集、密码字典生成和明文密码输出方法；在未经授权的环境中可直接用于凭证攻击。应仅在明确授权的渗透测试或实验环境中使用。

The code and documentation support password auditing and offensive identity-security testing. They present substantial dual-use and misuse risk because they automate corporate password candidate generation, AD username collection, and hash cracking, but the visible fragment does not contain clear malware, covert exfiltration, persistence, or destructive behavior. The unrestricted output path and publicly exposed hashcat brain-server example require operational safeguards.