Kerberos:
Vulnerability Discovery
Find AS-REP roastable and Kerberoastable accounts via key tools
Kerberoastable Service Accounts
Identify service accounts with SPNs vulnerable to Kerberoasting by extracting and cracking TGS tickets offline to compromise Active Directory credentials.
Kerberos Pre-Authentication Not Required
Identifies accounts with DONT_REQUIRE_PREAUTH set, enabling AS-REP roasting attacks to capture and offline-crack Kerberos hashes without credentials.
Kerberos vulnerability discovery identifies weaknesses in the domain's authentication configuration. Key targets include accounts with pre-authentication disabled (AS-REP roastable), service accounts with weak passwords vulnerable to Kerberoasting, hosts configured for unconstrained delegation, and SPNs set on high-privilege accounts.
The subpages walk through detection methods for each of these misconfigurations and how to assess their impact in the domain.