# Exploitation

> Kerberos attacks: roasting, ticket forging, and delegation abuse

- **URL:** https://hackindex.io/services/kerberos/exploitation
- **Service:** [Kerberos](https://hackindex.io/services/kerberos.md)
- **Tags:** initial-access, execution
- **Published:** 2026-03-11
- **Updated:** 2026-03-29

Kerberos exploitation ranges from unauthenticated hash extraction to full domain compromise.

AS-REP Roasting and Kerberoasting pull crackable hashes with no special privileges. Pass-the-Ticket and Overpass-the-Hash convert credentials into lateral movement.

Delegation misconfigurations let you impersonate domain admins or coerce DC authentication. Golden and Silver Tickets forge the tickets themselves for persistent domain-wide access.

## Guides

- [AS-REP Roasting – Pre-Auth Disabled Hash Cracking](https://hackindex.io/services/kerberos/exploitation/asrep-roasting.md): Exploit accounts with Kerberos pre-authentication disabled to capture AS-REP hashes offline, then crack them to recover plaintext credentials.
- [Kerberoasting – TGS Hash Extraction and Cracking](https://hackindex.io/services/kerberos/exploitation/kerberoasting.md)