SharpRoast-Parser

Bash one-liner that will parse harmj0y's SharpRoast into hashcat crack-able format.

https://grumpy-sec.blogspot.com/2018/08/kerberoasting-and-sharproast-output.html

cat kerberoast.txt | grep Hash -A 42 | sed 's/\<Hash\>//g' | sed s/://g | sed s/--//g | sed -r 's/\s+//g' | tr '\n' ' ' | sed 's/\s//g' | sed 's/$k\{1,\}/\'$'\n&/g'

Rubeus-Parser

Bash one-liner to parse GhostPack's Rubeus kerberoast module output into hashcat crack-able format.

cat kerberoast.txt | grep Hash -A 42 | sed 's/\[\*\]\ Hash//g' | sed s/://g | sed s/--//g | sed -r 's/\s+//g' | tr '\n' ' ' | sed 's/\s//g' | sed 's/$k\{1,\}/\'$'\n&/g'

Note

• You must adjust the grep Hash -A 42 to capture the full hash
• View README.md in 'Raw' format to copy paste or you will get weird format errors.
• Tested with utilities on Debian Linux, MacOS breaks all this stuff :p