# Vulnerability Discovery

> Find AS-REP roastable and Kerberoastable accounts via key tools

- **URL:** https://hackindex.io/services/kerberos/vulnerability-discovery
- **Service:** [Kerberos](https://hackindex.io/services/kerberos.md)
- **Tags:** vulns, misconfig, risk
- **Published:** 2026-05-15
- **Updated:** 2026-05-15

Kerberos vulnerability discovery identifies weaknesses in the domain's authentication configuration. Key targets include accounts with pre-authentication disabled (AS-REP roastable), service accounts with weak passwords vulnerable to Kerberoasting, hosts configured for unconstrained delegation, and SPNs set on high-privilege accounts.

The subpages walk through detection methods for each of these misconfigurations and how to assess their impact in the domain.

## Guides

- [Kerberoastable Service Accounts](https://hackindex.io/services/kerberos/vulnerability-discovery/kerberoastable-service-accounts.md): Identify service accounts with SPNs vulnerable to Kerberoasting by extracting and cracking TGS tickets offline to compromise Active Directory credentials.
- [Kerberos Pre-Authentication Not Required](https://hackindex.io/services/kerberos/vulnerability-discovery/kerberos-pre-auth-not-required.md): Identifies accounts with DONT_REQUIRE_PREAUTH set, enabling AS-REP roasting attacks to capture and offline-crack Kerberos hashes without credentials.