NetExec (formerly CrackMapExec) performs a Timeroasting attack via the SMB service. This command targets the remote Windows host and abuses the Kerberos protocol by manipulating ticket lifetimes or requesting renewable service tickets. It can help attackers obtain long-lived Kerberos tickets for offline cracking or later lateral movement.
Command Reference:
Target IP: 10.10.10.1
Module: timeroast
nxc smb 10.10.10.1 -M timeroast