Skip to content
Kerberoasting without SPNs
Summary
How to Kerberoast without knowing any SPNs: by requesting service tickets for fabricated SPN strings that still map to target accounts, attackers can obtain tickets encrypted with the account key and crack them offline — useful when SPN enumeration is noisy or unavailable.
- Published
- Collected