targetedKerberoast: Kerberoast with ACL abuse capabilities
targetedKerberoast
targetedKerberoast is a Python script that can, like many others (e.g. GetUserSPNs.py), print “kerberoast” hashes for user accounts that have an SPN set. This tool brings the following additional feature: for each user without SPNs, it tries to set one (abuse of write permission on the servicePrincipalName attribute), print the “kerberoast” hash, and delete the temporary SPN set for that operation. This is called targeted Kerberoasting. This tool can be used against all users of a domain or supplied in a list, or one user-supplied in the CLI.
Install
git clone https://github.com/ShutdownRepo/targetedKerberoast.git
pip install -r requirements.txt
Use
This tool supports the following authentications
- (NTLM) Cleartext password
- (NTLM) Pass-the-hash
- (Kerberos) Cleartext password
- (Kerberos) Pass-the-key / Overpass-the-hash
- (Kerberos) Pass-the-cache (type of Pass-the-ticket)
Source: https://github.com/ShutdownRepo/
