AD Attack Paths
Beta

Kerberoasting

Request Kerberos service tickets and crack them offline to recover service account passwords.

Access Required
Any authenticated security principal
Target Asset
Service account passwords
Exploits
Weak passwords + offline cracking
Stealth Level
High - offline attack, no failed logins
MITRE ATT&CK: T1558.003
1/22Beta