Sign in Get started

Tool

github.com/cube0x0/KrbRelay

https://github.com/cube0x0/KrbRelay

Published on: github.com
Sources in this catalogue: 2

ATT&CK techniques those detections carry

T1558Steal or Forge Kerberos Tickets
T1543Create or Modify System Process
T1543.003Windows Service
T1548Abuse Elevation Control Mechanism
T1548.002Bypass User Account Control
T1557Adversary-in-the-Middle
T1558.003Kerberoasting

Open the original

3 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
Detection	Severity	Source	Published	Licence
Service Creation via Local Kerberos Authentication	High	Elastic detection rules	Sep 20, 2026	Elastic License 2.0
Potential Privilege Escalation via Local Kerberos Relay over LDAP	High	Elastic detection rules	Aug 27, 2026	Elastic License 2.0
HackTool - KrbRelay Execution	High	SigmaHQ	Aug 26, 2026	Detection Rule License 1.1

Showing 3 of 3

Filter in the catalogue

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice