← All Kali Commands
🏰 Active Directory Kerbrute

Username enumeration

Kerbrute command for username enumeration. Copy the command below and use it in your terminal.

kerbrute — terminal
┌──(kali㉿kali)-[~]
└─$ kerbrute userenum -d domain.local users.txt
Tool
Kerbrute
Category
Active Directory
Purpose
Username enumeration

🛡️ Usage Tips

  • Always ensure you have proper authorization before using Kerbrute against any target
  • Replace target with the actual IP address or hostname you are testing
  • Run this command from a Kali Linux terminal or any system with Kerbrute installed
  • Combine with other Kerbrute commands for more comprehensive results
  • Pipe output to a file with > output.txt for later analysis

🔗 More Kerbrute Commands

kerbrute bruteuser -d domain.local passwords.txt user
Brute force user
kerbrute passwordspray -d domain.local users.txt password123
Password spray
kerbrute userenum -d domain.local users.txt --dc DC_IP
Specify DC
kerbrute bruteuser -d domain.local passwords.txt user --verbose
Verbose
kerbrute passwordspray -d domain.local users.txt Password1 --delay 100
With delay
kerbrute userenum -d domain.local users.txt -o valid_users.txt
Save output
kerbrute bruteforce -d domain.local combo.txt
User:pass combo
kerbrute userenum -d domain.local users.txt --downgrade
Downgrade encryption
kerbrute userenum -d domain.local users.txt --safe
Safe mode
kerbrute passwordspray -d domain.local users.txt "Summer2024!"
Common password
kerbrute userenum -d domain.local users.txt -t 10
10 threads
kerbrute bruteuser -d domain.local passwords.txt admin --dc 10.0.0.1
Specific DC brute

🏰 Other Active Directory Tools

BloodHound CrackMapExec Certipy Impacket Rubeus2 Enum4linux-ng
📚 Learn Kali Linux — Free Course