Skip to content

Conversation

@parzel
Copy link

@parzel parzel commented Jul 7, 2025

I added everything necessary to perform a DES ASREPRoast attack in an AD environment that still allows DES based on the code from this Rubeus PR: GhostPack/Rubeus#166
DES Kerberoasting is not implemented but you can also request a TGT with the cracked DES-key.

@anadrianmanrique anadrianmanrique added the in review This issue or pull request is being analyzed label Jul 17, 2025
if self.__outputFormat == 'john':
# Check if DES - not supported in John format
if asRep['enc-part']['etype'] == 3: # DES
raise Exception('DES not supported for john format, please rerun with --format hashcat')

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Jksy(
K k
I×™$

nthash = unhexlify(self.__nthash),
aesKey = self.__aesKey,
desKey = self.__desKey,
kdcHost = self.__kdcHost,

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Make anuzjao-/25

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in review This issue or pull request is being analyzed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants