Kekeo is a Windows-focused C toolbox for researching and manipulating Microsoft Kerberos authentication. It provides a command-driven environment for working with ticket-granting tickets, service tickets, codecs, and related protocol structures. The codebase also includes NTLM, SMB, server, and RPC-oriented modules that support broader authentication experiments. Kerberos messages are processed through generated ASN.1 definitions, including PKINIT and Microsoft-specific extensions. The project targets Visual Studio and supports both Win32 and x64 builds. Building it requires the commercial or trial OSS ASN.1/C toolchain because generated sources and libraries are not included directly. Its historical prebuilt binaries were time-limited through December 21, 2017, making source-based experimentation the practical approach.
Features
- Microsoft Kerberos protocol experimentation
- Ticket-granting and service ticket processing
- PKINIT and Microsoft ASN.1 definitions
- NTLM, SMB, RPC, and server modules
- Win32 and x64 Visual Studio builds
- Command-driven modular architecture