kerbrute

Kerberos username / password spraying (authorized testing).

$ kerbrute userenum -d corp.local users.txt --dc 10.0.0.1
$ kerbrute passwordspray -d corp.local users.txt 'Spring2026!'