Forged Kerberos Tickets

How to detect forged Kerberos tickets.

WonkaVision

WonkaVision can analyze Kerberos tickets and attempt to determine if they are forged.

• https://github.com/0xe7/WonkaVision

WonkaVision.exe /analyze /privatekey:C:\keys\private.key /dumpdir:C:\dumpshare\dumps