kerberos live roast command

What it does

Performs kerberoast/spnroast attack using the credentials of the current user

Remarks

This is a one-shot get all command, but it does not have control over the encryption type of the resulting TGS tickets. For that you'd need to use the normal spnroast command

Requirements

The command must be executed on a domain-joined machine with the context of a domain user.

Subcommands

None

Switches

• -o: Writes the TGS to file in hashcat format

Examples

• pypykatz live kerberos roast: Performs kerberoast