hashcat kerberoast crack

hashcat -m 13100 -a 0 hashes.txt wordlist.txt

Crack Kerberoasting hashes (mode 13100) with a dictionary attack.

After obtaining Kerberoasting or ASREPRoast hashes, use hashcat to recover plaintext passwords. This is the next step for privilege escalation, especially if passwords are weak.

If passwords are > 14 random characters, cracking may be infeasible. In that case, use the hashes for relay or pass-the-hash attacks instead of cracking them.