pykek

PyKEK is a legacy Python Kerberos toolkit with a proof of concept for CVE-2014-6324 (MS14-068), a Windows Kerberos KDC signature-validation flaw. The ms14-068.py script uses credentials and the SID of an existing domain account against a vulnerable, unpatched Active Directory KDC to obtain a TGT with forged privilege claims, saved as a Kerberos .ccache file. A separate Kerberos client must consume the cache; PyKEK itself does not inject the ticket or establish a service session.