targetedKerberoast
Targeted Kerberoasting: adds a temporary SPN (GenericWrite) and cleans up.
Targeted Kerberoasting: on an account you have GenericWrite or GenericAll over, it temporarily adds a servicePrincipalName, requests the (crackable) TGS and then removes the SPN to leave no trace.
Family Kerberos & tickets
Flags -d -u -p --dc-ip --request-user
Concepts Kerberoasting, GenericWrite
Cheatsheet Kerberos
Installation
git clone https://github.com/ShutdownRepo/targetedKerberoastUseful commands
Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.