🎯 AS-REP Roasting

The items that name it 6

• crypt0p3g/adnullenum
  repo2026-09-17It is written here as AS-REP roasting (preparation).

  collecting usernames via enumeration to feed AS-REP roasting against accounts not requiring Kerberos pre-authentication

• ADScanPro/Claude-AD
  repo2026-08-24

  Targets accounts without Kerberos preauthentication; covered in kerberos-attacks skill

• The OID Problem: Writing LDAP Detections That Actually Work
  writeup2025-12-16

  GetNPUsers.py identifies accounts with Kerberos pre-authentication disabled via userAccountControl&4194304 and sAMAccountType=805306368

• Tear Down The Castle - Part 2
  writeup2025-01-30

  Requesting Kerberos data from the DC for accounts that do not require pre-authentication, then cracking the account password offline; 19/250 domains affected (4/250 for admin accounts)

• PerfMon! What Is It Good For? | Huntress
  writeup2025-01-23

  Attack demonstrated via Rubeus targeting accounts configured not to require pre-authentication (e.g., 'Thanos' and 'Warmachine' accounts), detected via PerfMon traces

• Kerberosity Killed the Domain: An Offensive Kerberos Overview
  article2020-03-10

  Sending a fake AS-REQ for an account with Kerberos pre-authentication disabled, causing the KDC to return an AS-REP whose encrypted portion (session key, TGT expiration, nonce) can be cracked offline to recover the account's password hash