pentesting-freeipa - FreeIPA Penetration Testing Tool
Enumerates and attacks FreeIPA domains with LDAP enumeration, Kerberos ticket abuse, and delegation analysis
Tags
Updated: 2026-06-30Capabilities
Typical Inputs
Typical Outputs
What this skill does
- enumerate LDAP anonymously
- enumerate LDAP with GSSAPI
- obtain Kerberos tickets
- reuse CCACHE tickets
- extract TGT from keytab
- analyze HBAC rules
- analyze sudo rules
- enumerate users
- enumerate groups
- enumerate hosts
- dump password hashes
- build attack graph
- query delegation paths
- write certificates
- impersonate users
- extract tickets from keyring
Inputs
- FreeIPA server address
- Kerberos realm
- host keytab
- CCACHE ticket
- password
- IPA credentials
Outputs
- LDAP directory data
- attack path graph
- password hashes
- user lists
- HBAC rules
- sudo rules
- delegation attributes
- certificates
Requirements
- authorized penetration testing environment
- Kerberos client tools
- LDAP client tools
- Neo4j for IPAHound graphing