What is a Kerberoasting attack? You obtain a large number of service tickets from the Kerberos authentication service and then using specialized tools to crack the passwords associated with those tickets. This allows an attacker to gain access to the accounts associated with the service ticket.