🚀 AdPentest v1.7.1 — Kerberos Silver Ticket Security Audit

AdPentest v1.7.1 — Kerberos Silver Ticket Security Audit

Objective

Extend the latest AdPentest release with a dedicated Kerberos security assessment focused on Silver Ticket exposure.

Proposed capabilities

• 🔎 Enumerate Kerberos SPNs
• 👤 Identify service accounts associated with SPNs
• 🔐 Assess service-account security configuration
• 🛡️ Detect indicators associated with Silver Ticket abuse
• 📊 Correlate available Kerberos authentication events
• ⚠️ Generate PASS / REVIEW / FAIL findings
• 📄 Export findings to JSON
• 💻 Display identical results in CLI and JSON
• 🧪 Support isolated AD lab testing

CLI

adpentest kerberos audit --target <authorized-domain>

Example output

{
  "module": "kerberos",
  "check": "silver_ticket_risk",
  "status": "REVIEW",
  "severity": "HIGH",
  "evidence": [],
  "recommendations": []
}

Safety

The default implementation should remain detection/audit oriented. Any validation must be performed only against explicitly authorized laboratory or assessment environments. No automatic ticket forging, credential extraction, or ticket injection is proposed for the default audit workflow.

Testing

• Unit tests
• Synthetic Kerberos event fixtures
• AD lab integration tests
• JSON schema validation
• CLI regression tests
• CI validation

Roadmap

• SPN enumeration
• Service-account assessment
• Silver Ticket detection
• Kerberos event analysis
• JSON reporting
• CLI integration
• AD lab tests
• Documentation

No implementation files are named. Start by locating the entry point for adpentest kerberos audit --target <authorized-domain> and review the existing CLI and JSON reporting paths. Done requires the listed SPN, service-account, Silver Ticket, event-analysis, reporting, lab, schema, regression, and CI tests to be defined and passing.