Hashcat

Active Directory

AS-REP Roasting: Abusing Accounts Without Kerberos Pre-Authentication

How attackers extract and crack Kerberos AS-REP hashes from accounts with pre-authentication disabled, and how blue teams defend.