exploiting-kerberoasting-with-impacket

What problem does it solve?

Kerberoasting with Impacket enables authorized testers to extract Kerberos tickets from Active Directory service accounts for offline cracking, facilitating credential access assessments in controlled environments.

Core Features & Use Cases

• Enumerate SPN accounts with GetUserSPNs.py (including -request flows) and identify high-value targets (DA members, accounts with SPNs)
• Request TGS tickets for those accounts to produce hash data for offline cracking with Hashcat or John the Ripper
• Analyze results to validate password resilience and enable remediation planning for service accounts

Quick Start

Run the Kerberoasting workflow in a secure lab to enumerate SPNs, request TGS tickets for high-value accounts, and crack them offline.