Repo brief: GhostPack/Rubeus

Generated by RepoPilot · document generated 2026-09-13 · concise human review Evidence snapshot · analyzed 2026-09-13T20:14:11.138Z · commit 74215f68ea70

Verdict

Mixed — Slowing — last commit 3mo ago

• Last commit 3mo ago
• 19 active contributors
• Distributed ownership (top contributor 41% of recent commits)

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against OpenSSF Scorecard

What it is

Rubeus is a C# toolset for raw Kerberos protocol interaction and security testing, enabling ticket forgery, constrained delegation abuse, and credential extraction attacks against Active Directory environments. It provides commands for requesting tickets (TGT/TGS), crafting forged tickets (golden/silver/diamond), and manipulating Kerberos tokens in Windows security contexts. Single C# project structure: Rubeus/ root contains command modules under Commands/ (one file per command: ASREP2Kirbi.cs, Asktgs.cs, Asktgt.cs, etc.), ASN.1 parsing in Asn1/, domain logic in lib/ (Crypto.cs, ForgeTicket.cs, Helpers.cs, Bruteforcer.cs), and core Program.cs driving the CLI via ArgumentParser and…

Start here

Open these first:

• Rubeus/Program.cs — Entry point and command dispatcher that routes user input to specific Kerberos attack modules.
• Rubeus/Domain/CommandCollection.cs — Registry of all available commands that defines the attack surface and plugin architecture.
• Rubeus/lib/krb_structures/AS_REQ.cs — Core Kerberos AS-REQ structure implementation used in initial authentication requests.
• Rubeus/lib/Crypto.cs — Cryptographic primitives and encryption/decryption operations for Kerberos protocol handling.
• Rubeus/Asn1/AsnElt.cs — ASN.1 element encoding/decoding foundation for all Kerberos message serialization.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

Clone the repository: git clone https://github.com/GhostPack/Rubeus.git. Open Rubeus.sln in Visual Studio (Windows/.NET environment required). Build via msbuild Rubeus.sln or Visual Studio build UI. Exact dependency…

Daily commands:

No dev server; Rubeus is a command-line tool. After building Rubeus.sln, run the compiled executable with command arguments (e.g., Rubeus.exe asktgt /user:username /password:[REDACTED] /domain:domain.com). Exact usage…

…shortened for this brief.

Key cautions & unknowns

• Slowing — last commit 3mo ago
• No CI workflows detected
• No tests detected in the complete Git tree
• Rubeus is Windows/.NET Framework-specific and requires a Windows host with Active Directory integration or LSASS access; cross-platform execution will fail. Several commands depend on valid Kerberos realm configuration…
• License evidence is incomplete or ambiguous.
• Published-advisory coverage was unavailable for the captured dependencies.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests
• OpenSSF Scorecard

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.