Vulnerability Discovery

Kerberoastable Service Accounts

Identify service accounts with SPNs vulnerable to Kerberoasting by extracting and cracking TGS tickets offline to compromise Active Directory credentials.

May 15, 2026 • 4 min read

Kerberos Pre-Authentication Not Required

Identifies accounts with DONT_REQUIRE_PREAUTH set, enabling AS-REP roasting attacks to capture and offline-crack Kerberos hashes without credentials.

May 15, 2026 • 3 min read