Hashcat AS-REP Roasting Cracking

Crack AS-REP roasting hashes obtained from accounts without Kerberos pre-auth

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated April 10, 2026

Tool: hashcat
Category: Credential Attacks / Hash Cracking
Platform: linux

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

hashcat -m 18200 '<hash_file>' /usr/share/wordlists/rockyou.txt

Credential variants

The same attack using a different authentication material.

With Rules

hashcat -m 18200 '<hash_file>' /usr/share/wordlists/rockyou.txt -r /usr/share/hashcat/rules/best64.rule

Examples

hashcat -m 18200 asrep.hashes /usr/share/wordlists/rockyou.txt

Tags

hashcat asrep as-rep-roasting kerberos hash-cracking offline

NetExec SMB Auth Test Test SMB authentication with various credential types
Evil-WinRM Shell Windows Remote Management shell connection
Hashcat Kerberoast Crack Crack Kerberoasting hashes
Hashcat MSCacheV2 (DCC2) Cracking Crack MSCacheV2 (Domain Cached Credentials v2 / DCC2) hashes extracted from registry
Hashcat NTLM Crack Crack NTLM hashes using wordlist attack
Hashcat NTLMv2 Cracking Crack NTLMv2 (NetNTLMv2) challenge-response hashes captured from Responder or relay…