└── README.md /README.md: -------------------------------------------------------------------------------- 1 | # SharpRoast-Parser 2 | Bash one-liner that will parse harmj0y's [SharpRoast](https://github.com/GhostPack/SharpRoast) into hashcat crack-able format. 3 | 4 | https://grumpy-sec.blogspot.com/2018/08/kerberoasting-and-sharproast-output.html 5 | 6 | ```bash 7 | cat kerberoast.txt | grep Hash -A 42 | sed 's/\//g' | sed s/://g | sed s/--//g | sed -r 's/\s+//g' | tr '\n' ' ' | sed 's/\s//g' | sed 's/$k\{1,\}/\'$'\n&/g' 8 | ``` 9 | 10 | # Rubeus-Parser 11 | Bash one-liner to parse GhostPack's [Rubeus](https://github.com/GhostPack/Rubeus) kerberoast module output into hashcat crack-able format. 12 | 13 | ```bash 14 | cat kerberoast.txt | grep Hash -A 42 | sed 's/\[\*\]\ Hash//g' | sed s/://g | sed s/--//g | sed -r 's/\s+//g' | tr '\n' ' ' | sed 's/\s//g' | sed 's/$k\{1,\}/\'$'\n&/g' 15 | ``` 16 | 17 | # Note 18 | - You must adjust the ```grep Hash -A 42``` to capture the full hash 19 | - View README.md in 'Raw' format to copy paste or you will get weird format errors. 20 | - Tested with utilities on Debian Linux, MacOS breaks all this stuff :p 21 | --------------------------------------------------------------------------------