hashcat Forum › Support › hashcat v
Kerberos 5, etype 18, TGS-REP

Threaded Mode
Kerberos 5, etype 18, TGS-REP
zamgold Offline
Junior Member
**
Posts: 41
Threads: 12
Joined: Jan 2015
#1
11-15-2024, 01:14 PM
I have hash Kerberos 5, etype 18, TGS-REP in format like 13100:

$krb5tgs$18$*...*$....$......


are there any ways to hack it?
Find
Reply
DanielG Offline
Pentester
***
Posts: 196
Threads: 0
Joined: Nov 2017
#2
11-15-2024, 02:22 PM
all you can do is try to guess the password using hashcat
Find
Reply
zamgold Offline
Junior Member
**
Posts: 41
Threads: 12
Joined: Jan 2015
#3
11-15-2024, 02:33 PM
(11-15-2024, 02:22 PM)DanielG Wrote: all you can do is try to guess the password using hashcat


How?
Find
Reply
DanielG Offline
Pentester
***
Posts: 196
Threads: 0
Joined: Nov 2017
#4
11-15-2024, 03:44 PM
The Wiki on https://hashcat.net/wiki/doku.php?id=hashcat has usage information.
On the internet there are blogs related to this type of attack (kerberoasting) for example https://www.netwrix.com/cracking_kerbero...sting.html or on this forum https://hashcat.net/forum/thread-8531.html
Find
Reply
zamgold Offline
Junior Member
**
Posts: 41
Threads: 12
Joined: Jan 2015
#5
11-15-2024, 08:39 PM
(11-15-2024, 03:44 PM)DanielG Wrote: The Wiki on https://hashcat.net/wiki/doku.php?id=hashcat has usage information.
On the internet there are blogs related to this type of attack (kerberoasting) for example https://www.netwrix.com/cracking_kerbero...sting.html or on this forum https://hashcat.net/forum/thread-8531.html

For my example  $krb5tgs$18$*...*$....$......   - it's type of hash is not support  by hashcat...
Find
Reply
DanielG Offline
Pentester
***
Posts: 196
Threads: 0
Joined: Nov 2017
#6
11-17-2024, 10:26 PM
On the example page on https://hashcat.net/wiki/doku.php?id=example_hashes you see

type: 19700

Kerberos 5, etype 18, TGS-REP (AES256-CTS-HMAC-SHA1-96) $krb5tgs$18$user$realm$8efd91bb01cc69dd07e46009$7352410d6aafd72c64972a66058b02aa1c28ac580ba41137d5a170467f06f17faf5dfb3f95ecf4fad74821fdc7e63a3195573f45f962f86942cb24255e544ad8d05178d560f683a3f59ce94e82c8e724a3af0160be549b472dd83e6b80733ad349973885e9082617294c6cbbea92349671883eaf068d7f5dcfc0405d97fda27435082b82b24f3be27f06c19354bf32066933312c770424eb6143674756243c1bde78ee3294792dcc49008a1b54f32ec5d5695f899946d42a67ce2fb1c227cb1d2004c0

which looks like your hash and is supported, make sure everything is present in your hash
Find
Reply