krbrelayx

python krbrelayx.py -aesKey <aes-key> --target ldap://<dc> --escalate-user <user>

Relay Kerberos authentications to escalate privileges via authentication delegation (RBCD).

When you have captured a TGT ticket from a host and want to relay it to escalate privileges. krbrelayx allows using Kerberos authentication to modify AD (e.g., adding a user to Domain Admins).

If you do not have the AES key of the source host. Also if the DC has delegation restrictions.