summaryrefslogtreecommitdiff
path: root/FixTime
diff options
context:
space:
mode:
author5epi0l <91630053+5epi0l@users.noreply.github.com>2025-11-16 06:24:34 +0530
committerGitHub <noreply@github.com>2025-11-16 06:24:34 +0530
commit88a4ea3c63efe0b8501c34684ef01a529fadccae (patch)
treee7dc5c949692616bac617c4ebcf3103d071c6203 /FixTime
parent8d04b060c837fca25410edb7cda4e99ebe8b703c (diff)
Create README.md
Diffstat (limited to 'FixTime')
-rw-r--r--FixTime/README.md64
1 files changed, 64 insertions, 0 deletions
diff --git a/FixTime/README.md b/FixTime/README.md
new file mode 100644
index 0000000..df1d78e
--- /dev/null
+++ b/FixTime/README.md
@@ -0,0 +1,64 @@
+# **TimeFix – Kerberos Clock Skew Auto-Fix Toolkit**
+
+When attacking Windows domains (WinRM, Kerberos auth, Impacket, Evil-WinRM, etc.), you may hit the classic:
+
+```
+KRB_AP_ERR_SKEW – Clock skew too great
+```
+
+**TimeFix** provides **two small tools (Bash + Python)** that automatically fetch the target machine’s time via its WinRM HTTP `Date:` header and sync your local clock to match it.
+
+Perfect for pentesters doing Kerberos-based operations where precise time alignment is required.
+
+---
+
+## **Features**
+
+* πŸ”Ž Fetches remote Windows system time from WinRM (port **5985**)
+* ⏱ Automatically sets your Linux system clock to match the target
+* πŸ’₯ Instantly fixes Kerberos clock skew errors
+* πŸ›  Includes **two versions**:
+
+ * **Bash script** for quick usage on Linux
+ * **Python3 script** for cross-platform usage and cleaner parsing
+* πŸ”’ Gracefully handles failures & can re-enable system time sync
+
+---
+
+## **Usage**
+
+### **Bash Version**
+
+```bash
+sudo ./timefix <IP>
+```
+
+Example:
+
+```bash
+sudo ./timefix 10.10.10.5
+```
+
+---
+
+### **Python Version**
+
+```bash
+python3 timefix.py -u <IP>
+```
+
+Example:
+
+```bash
+python3 timefix.py -u http://10.10.10.5
+```
+
+---
+
+## **Purpose**
+
+These scripts are designed for lab, CTF, and penetration-testing environments where:
+
+* Kerberos authentication breaks due to clock skew
+* NTP is disabled or not configurable
+* You need a fast, reliable way to sync with the target host