Command Manager

Cypher: AS-REP Roastable Users

List every user with DONT_REQ_PREAUTH set — these accounts can be AS-REP roasted without prior authentication. Feed the names directly to GetNPUsers or nxc --asreproast.

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated

Tool
MATCH
Category
Enumeration / BloodHound Cypher Queries
Platform
cross-platform
Requires
no credentials

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

MATCH (u:User {dontreqpreauth:true}) RETURN u.name

Examples

MATCH (u:User {dontreqpreauth:true}) RETURN u.name

Tags

bloodhound cypher asreproast preauth graph

References