Initial commit - 611 cybersecurity skills across all subdomains

skills/performing-kerberoasting-attack/assets/template.md

@@ -0,0 +1,57 @@
+# Kerberoasting Assessment Report Template
+
+## Document Control
+| Field | Value |
+|-------|-------|
+| Domain | [DOMAIN.LOCAL] |
+| Engagement ID | [ID] |
+| Assessor | [NAME] |
+| Date | [DATE] |
+
+---
+
+## 1. Summary
+Total Kerberoastable Accounts: [X]
+Credentials Cracked: [Y] / [X]
+
+## 2. Vulnerable Accounts
+
+| Account | SPN | Admin | Cracked | Password Age (days) |
+|---------|-----|-------|---------|-------------------|
+| | | Yes/No | Yes/No | |
+
+## 3. Attack Evidence
+
+### TGS Request Command
+```
+[command used]
+```
+
+### Cracking Command
+```
+[hashcat command]
+```
+
+### Cracked Output
+```
+[account:password]
+```
+
+## 4. Impact Assessment
+
+| Account | Access Level | Systems Affected | Risk |
+|---------|-------------|-----------------|------|
+| | | | Critical/High/Medium |
+
+## 5. Recommendations
+
+| # | Recommendation | Priority | Effort |
+|---|---------------|----------|--------|
+| 1 | Convert to gMSA | Critical | Medium |
+| 2 | Set 25+ char passwords | Critical | Low |
+| 3 | Disable RC4 encryption | High | Medium |
+| 4 | Deploy SPN honeypots | Medium | Low |
+
+## 6. MITRE ATT&CK Reference
+- T1558.003 - Kerberoasting
+- T1087.002 - Domain Account Discovery