Which tool is primarily used to perform AS-REP roasting against Active Directory accounts?

Which tool is primarily used to perform AS-REP roasting against Active Directory accounts?

• A. Responder
• B. Rubeus
• C. Golden Tickets
• D. Fingerprint Attack

Answer: (B)

AS-REP roasting targets AD accounts that do not require Kerberos preauthentication. When such an account asks for a TGT, the KDC responds with an AS-REP that includes an encrypted blob tied to the account’s password. That blob can be cracked offline to recover the password. The tool designed to automate this exact workflow is Rubeus, which includes a roast capability to request AS-REP responses for chosen users and capture the encrypted data for offline cracking. Responder is for network credential harvesting via LLMNR/NetBIOS poisoning, not for AS-REP roasting. Golden Tickets are forged TGTs used after compromising the KRBTGT, not for roasting. Fingerprint Attack isn’t the standard method for this technique. So the best choice is the one that directly implements AS-REP roasting.

AS-REP roasting targets AD accounts that do not require Kerberos preauthentication. When such an account asks for a TGT, the KDC responds with an AS-REP that includes an encrypted blob tied to the account’s password. That blob can be cracked offline to recover the password. The tool designed to automate this exact workflow is Rubeus, which includes a roast capability to request AS-REP responses for chosen users and capture the encrypted data for offline cracking. Responder is for network credential harvesting via LLMNR/NetBIOS poisoning, not for AS-REP roasting. Golden Tickets are forged TGTs used after compromising the KRBTGT, not for roasting. Fingerprint Attack isn’t the standard method for this technique. So the best choice is the one that directly implements AS-REP roasting.