Kerberos:

Exploitation

Kerberos attacks: roasting, ticket forging, and delegation abuse

2 guides • Updated Mar 29, 2026

2 guides

AS-REP Roasting – Pre-Auth Disabled Hash Cracking

Exploit accounts with Kerberos pre-authentication disabled to capture AS-REP hashes offline, then crack them to recover plaintext credentials.

Mar 11, 2026 • 3 min read

Kerberoasting – TGS Hash Extraction and Cracking

Mar 11, 2026 • 4 min read

Kerberos exploitation ranges from unauthenticated hash extraction to full domain compromise.

AS-REP Roasting and Kerberoasting pull crackable hashes with no special privileges. Pass-the-Ticket and Overpass-the-Hash convert credentials into lateral movement.

Delegation misconfigurations let you impersonate domain admins or coerce DC authentication. Golden and Silver Tickets forge the tickets themselves for persistent domain-wide access.