# Kerberos Attacks > Skills for Kerberos-based attacks in Active Directory including Kerberoasting and AS-REP Roasting. Use when this capability is needed. - Skill: `tomevault-io/kerberos-attacks` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/kerberos-attacks` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/kerberos-attacks/raw - Safety review: pending - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Coding & Dev Tools - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/kerberos-attacks --- # Kerberos Attacks Kerberos protocol exploitation in Active Directory environments. ## Skills - [Kerberoast](references/kerberoast.md) - Service account TGS ticket cracking - [AS-REP Roast](references/asreproast.md) - Pre-auth disabled accounts ## Quick Reference | Attack | Hash Mode | Target | |--------|-----------|--------| | Kerberoast | 13100 (RC4), 19700 (AES256) | Service accounts with SPN | | AS-REP Roast | 18200 | Accounts without preauth | --- > Converted and distributed by [TomeVault](https://tomevault.io/claim/omkar-ukirde) — claim your Tome and manage your conversions.