[w0lff4ng@site]: ~/cheat-sheets$ ./info
File: /home/w0lff4ng/cheat-sheets/roasting
Access: (0644/-rw-r--r--) Uid: (1000/w0lff4ng) Gid: (100/users)
Modify: 2026-10-21
[w0lff4ng@site]: ~/cheat-sheets$ cd roasting/█

Roasting

techniqueenumeraciónwindows← índice

PowerView

Usuarios sin pre-auth requerido (ASREPRoastable):

Get-DomainUser -PreAuthNotRequired | Select-Object SamAccountName

Usuarios con SPN (posible Kerberoastable):

Get-DomainUser -SPN | Select-Object SamAccountName, ServicePrincipalName, MemberOf

Módulo ActiveDirectory

Usuarios sin pre-auth requerido (ASREPRoastable):

Get-ADUser -Filter {DoesNotRequirePreAuth -eq $true} -Properties * | Select-Object SAMAccountName

Usuarios con SPN (posible Kerberoastable):

Get-ADUser -Filter {ServicePrincipalName -ne "$null"} -Properties * | Select-Object SamAccountName, ServicePrincipalName, MemberOf