Hashcat Kerberoast Crack

Crack Kerberoasting hashes

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated April 10, 2026

Tool: sudo
Category: Credential Attacks / Hash Cracking
Platform: cross-platform
Requires: NTLM hash

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

sudo hashcat -m 13100 kerberoasting.hashes /usr/share/wordlists/rockyou.txt -r /usr/share/hashcat/rules/best64.rule --force

Examples

sudo hashcat -m 13100 kerberoasting.hashes /usr/share/wordlists/rockyou.txt -r /usr/share/hashcat/rules/best64.rule --force

Tags

hashcat kerberoasting cracking kerberos

Hashcat AS-REP Roasting Cracking Crack AS-REP roasting hashes obtained from accounts without Kerberos pre-auth
Hashcat MSCacheV2 (DCC2) Cracking Crack MSCacheV2 (Domain Cached Credentials v2 / DCC2) hashes extracted from registry
Hashcat NTLM Crack Crack NTLM hashes using wordlist attack
Hashcat NTLMv2 Cracking Crack NTLMv2 (NetNTLMv2) challenge-response hashes captured from Responder or relay…