Regarding kerberoast-sspi

[alxchk]

Does this thing really work?

Whatever I tried InitializeSecurityContext never return something which looks like AP_REQ.
Tried in two different setups, and always had 1.2.840.113554.1.2.2.3 structure with realm + domain name and several (3) integers.

[skelsec]

Umm... your question is does this thing work but you haven't tried running it to see if it works or not?
Otherwise please provide some error message or incorrect results which indicates it doesn't work so I can try to fix it.
I'm using it regularly and it works for me...