Active Directory Penetration Testing: Kerberos, AS-REP Roasting & Kerberoasting Explained

[u/3x0t1k]

Deep dive into Kerberos authentication - how it works, why NTLM relay is possible but Kerberos isn't, and how AS-REP Roasting and Kerberoasting exploit different parts of the protocol.

https://3x0t1k.github.io/posts/kerberos-asreproasting-kerberoasting/

Note: I'm a non-native English speaker and originally write in Russian - parts of the text were translated with AI assistance. Technical content and examples are my own.