Azox

@_nwodtuhs @al3x_n3ff @theluemmel Exactly when the flag is passed, we build an LDAP filter that excludes accounts that already have a SPN

@al3x_n3ff @theluemmel @azoxlpf I guess there’s a search filter for users without SPNs only?

Targeted Keberoasting with NetExec🔥 If you have Write privileges over a user, you can temporarily add an SPN to your target user, request the service ticket, and then remove the SPN. Voilà: a crackable hash without interfering with potentially critical users. Made by @azoxlpf🚀

@Defte_ Goat ❤️

This guy has been doing a lot for cybersecurity research and developement on NetExec, follow him x.com/azoxlpf :)