Hash Cracking NTLM hashcat -m 1000 --force -a 0 hashes.txt <wordlist> NetNTLMv2 hashcat -m 5600 --force -a 0 hashes.txt <wordlist> AS-REP (Kerberos 5 AS-REP etype 23) hashcat -m 18200 --force -a 0 hashes.txt <wordlist> Kerberoasted SPN (Kerberos 5 TGS-REP) hashcat -m 13100 --force -a 0 hashes.txt <wordlist>