---
id: 5821
title: "Kerberoasting Explained"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/kerberoasting-explained/"
published_at: "2024-10-12T01:35:32Z"
tags: ["active-directory", "credential-theft", "privilege-escalation", "kerberoasting", "five-eyes", "purple-knight"]
phying_url: "https://phying.com/item/5821"
lang: en
---

# Kerberoasting Explained

## Summary

Kerberoasting lets any domain user crack Kerberos service tickets for SPN-registered accounts offline, recovering plaintext passwords—often for high-privilege accounts. Covers defenses and detection.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2024-10-12T01:35:32Z
- **Original:** https://www.semperis.com/blog/kerberoasting-explained/
- **Phying News:** https://phying.com/item/5821