dnrops
/
metasploit-framework
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
metasploit-framework/lib/rex/proto/kerberos
History
Spencer McIntyre 0ade721bf1 Propagate precise encryption key length errors 2024-02-23 10:28:05 -05:00
..
credential_cache Add a presenter for the PAC credential information 2024-02-23 09:48:09 -05:00
crypto Propagate precise encryption key length errors 2024-02-23 10:28:05 -05:00
keytab Namespace krb5 models 2022-11-02 13:04:52 +00:00
model spelling fixes for lib folder 2024-01-06 15:54:49 -05:00
pac Fix bug in writing UpnDnsInfo structure, and include in sapphire PAC 2023-11-17 13:49:55 +11:00
README.md Add additional kerberos documentation 2023-01-18 16:58:34 +00:00
client.rb Add proxies datastore support to kerberos 2023-07-21 11:19:50 +01:00
credential_cache.rb Add and use a new kerberos CCache model definition 2022-07-01 11:57:30 -04:00
crypto.rb Update windows_secrets_dump and Keytab module to export kerberos keys 2022-12-14 13:40:39 +00:00
keytab.rb Align with keytab instead of key_tab 2022-11-02 13:04:51 +00:00
model.rb Support Kerberos auth for DCERPC 2023-09-28 16:26:06 +10:00
pac.rb Add new PAC types required by DCs for accepting TGTs as valid 2023-09-12 17:19:10 +10:00

README.md

Rex Kerberos Protocol

Useful resources

API Gotchas

The API fields cname and client_name, as well as sname and server_name are not interchangeable. The cname and sname values are objects to be encoded into a Kerberos packet, but can be generated by specifying simpler client_name or server_name strings.

Development

Decrypting encrypted Kerberos blobs

The Kerberos protocol makes use of encrypted values which will show as an opaque blob of hex characters in Wireshark. Look at the module documentation in modules/auxiliary/admin/kerberos/keytab.md for ways to decrypt wireshark traffic using keytab files.