: Use Impacket’s secretsdump.py with your new user's credentials to dump all domain hashes, including the Administrator NTLM hash.
: Used for AS-REP Roasting and dumping domain secrets. forest hackthebox walkthrough best
Add that user to high-privilege groups like . : Use Impacket’s secretsdump