From PCAP to Passwords: Automating Kerberos Roast Extraction

Original text by jalvarezz13

Krb5RoastParser is an open-source Python tool created to simplify the extraction of Kerberos authentication hashes from captured network traffic. Instead of manually analyzing packets in Wireshark, the tool processes .pcap files and automatically identifies Kerberos authentication messages such as AS-REQ, AS-REP, and TGS-REP. Using tshark, the script parses these packets and…

https://core-jmp.org/2026/03/from-pcap-to-passwords-automating-kerberos-roast-extraction/