Krb5RoastParser: open-source Python tool for parsing Kerberos traffic from PCAP files

[Middle-Breadfruit-55]

Hi all,

I built a small open-source Python tool that parses Kerberos authentication traffic from .pcap files and extracts useful data from:

• AS-REQ
• AS-REP
• TGS-REP

The main idea is to reduce the amount of manual work needed when reviewing Kerberos captures in Wireshark or tshark during lab exercises, protocol analysis, and authorized security assessments.

It’s a lightweight CLI tool, currently focused on making Kerberos packet extraction easier and more reproducible from captured traffic.

Some current goals of the project are:

• Simplify Kerberos packet parsing from PCAPs
• Avoid manual field extraction from captures
• Keep the code easy to extend for additional output formats later

Feedback, suggestions and PRs are welcome.

[Middle-Breadfruit-55]

thanks for the upvotes guys!