kerberos-roasting

Official

Crack Kerberos tickets for offline password recovery.

Authorblacklanternsecurity
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill automates the extraction and cracking of Kerberos service tickets (Kerberoasting) and AS-REP hashes (AS-REP Roasting) to uncover weak passwords for offline analysis.

Core Features & Use Cases

  • Kerberoasting: Extracts Ticket Granting Service (TGS) tickets for service accounts with Service Principal Names (SPNs).
  • AS-REP Roasting: Extracts Authentication Service (AS) REP hashes from accounts that do not require pre-authentication.
  • Use Case: A penetration tester can use this skill to identify service accounts with weak passwords, which can then be leveraged for further network compromise.

Quick Start

Extract Kerberos TGS hashes for all accounts with SPNs from the domain controller at 10.0.0.5 using the provided domain user credentials.

Dependency Matrix

Required Modules

impacketrubeusnetexecbloodyADtargetedKerberoast.pytimeroast.pykirbi2john.py

Components

scriptsreferences

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: kerberos-roasting
Download link: https://github.com/blacklanternsecurity/red-run/archive/main.zip#kerberos-roasting

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.