AS-REP Roasting is the process of cracking which Kerberos artifact to recover the user's password?

• A. TGS (Ticket Granting Service)
• B. TGT (Ticket Granting Ticket)
• C. Kerberos Token
• D. Service Ticket

Answer: (B)

AS-REP Roasting targets the Ticket Granting Ticket that Kerberos issues as part of the initial authentication. When a client requests access and the environment allows it without pre-authentication, the Kerberos Key Distribution Center responds with an AS-REP that includes the TGT and a session key, both of which are encrypted in a way that is tied to the user’s password-derived key. An attacker who captures this AS-REP can then perform offline brute-force or dictionary attacks to recover the user’s password because each candidate password yields a different key used to protect the encrypted data inside the AS-REP. The focus is on cracking the TGT contained in that AS-REP since breaking the password lets you decrypt the relevant portion and obtain the session key needed for further Kerberos operations. The other artifacts, like service tickets used after obtaining a TGT or any Kerberos tokens, aren’t the direct targets of this offline cracking technique.