A script that perform a Pre-Auth with a Domain Controller with a given username and a list of hashes
Script still in development but works fine at this stage.
Didn't find that option 1 username and multiple hashes in both CrackMapExec and Impacket so thought could be useful to develop one. Useful when retrieving multiple hashed from miscellaneous sources and whant to test them to pivot or lateral movement.
Important
The option has been merged in both crackmapexec (not supported anymore) and in NXC that is the actively manteined successor.
Tip
That script actually act differently from both previously mentioned solutions, since perform Kerberos Auth and in some restricted environment this actually bypass countermeasures of ban like wail2ban