Kerberos:
Exploitation
Kerberos attacks: roasting, ticket forging, and delegation abuse
2 guides
•
Updated Mar 29, 2026
AS-REP Roasting – Pre-Auth Disabled Hash Cracking
Exploit accounts with Kerberos pre-authentication disabled to capture AS-REP hashes offline, then crack them to recover plaintext credentials.
Kerberos exploitation ranges from unauthenticated hash extraction to full domain compromise.
AS-REP Roasting and Kerberoasting pull crackable hashes with no special privileges. Pass-the-Ticket and Overpass-the-Hash convert credentials into lateral movement.
Delegation misconfigurations let you impersonate domain admins or coerce DC authentication. Golden and Silver Tickets forge the tickets themselves for persistent domain-wide access.