Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

#1261 Fixed output of secretsdump when LSA's Security Questions Security Answers structure is empty #55

Open
wants to merge 229 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
229 commits
Select commit Hold shift + click to select a range
755efbf
Added SystemDPAPIdump.py example
Aug 3, 2021
a39d8db
Patching SID query of the incoming user
ShutdownRepo Sep 13, 2021
46f2aa9
Merge branch 'SecureAuthCorp:master' into aclattack
ShutdownRepo Sep 13, 2021
48adfe3
Added user filter and changed a string
ShutdownRepo Oct 13, 2021
5276230
Adding describeTicket base
ShutdownRepo Oct 25, 2021
71f6586
Adding "only S4U2Self" switch
ShutdownRepo Oct 25, 2021
224901d
Changing getST header to python3
ShutdownRepo Oct 25, 2021
eba8475
SPN argument optional when No S4U2Proxy is done
ShutdownRepo Oct 26, 2021
09717a6
Started implementing Ticket decryption
ShutdownRepo Oct 26, 2021
386e50f
Update describeTicket.py
p0dalirius Oct 26, 2021
ad5b10c
Added PAC structures
ShutdownRepo Oct 28, 2021
ccdb6a2
Improved PAC parsing and printing
ShutdownRepo Oct 30, 2021
214c356
Fixing the PAC_CLIENT_INFO structure
ShutdownRepo Oct 31, 2021
ccec4a1
Fixes dates, improved errors, prepared for PR
ShutdownRepo Oct 31, 2021
1c385cc
Added PAC Credentials structure, improved code
ShutdownRepo Nov 1, 2021
e74f485
Reverting getST edit
ShutdownRepo Nov 1, 2021
31d18cf
Cleaning imports and overall code
ShutdownRepo Nov 1, 2021
37df098
Reverting ALL getST changes, wrong dev branch
ShutdownRepo Nov 1, 2021
428e56e
Debugging some keys calculation
ShutdownRepo Nov 1, 2021
b4774d6
Merge branch 'SecureAuthCorp:master' into getST
ShutdownRepo Nov 1, 2021
4bc842d
Merge branch 'SecureAuthCorp:master' into findDelegation
ShutdownRepo Nov 1, 2021
b4fbcf9
Added renameMachine.py
ShutdownRepo Dec 10, 2021
9d0158b
Improved error handling and expected behavior for patched envs
ShutdownRepo Dec 13, 2021
4206def
Fixed small if elif order for debug messages
ShutdownRepo Dec 15, 2021
de5906d
Modified searchFilter to show RBCD over DCs
GeisericII Jan 26, 2022
8d738ad
Added possibility to query delegs for disabled users
GeisericII Jan 26, 2022
3c9432e
Merge branch 'SecureAuthCorp:master' into findDelegation
ShutdownRepo Feb 5, 2022
55e9742
Added "-disabled" switch to query only delegs for disabled users
GeisericII Feb 5, 2022
7fc473c
Update smbattack.py
n00py Feb 8, 2022
41103be
Forgot one
n00py Feb 8, 2022
7412a74
Improved exporting and added Kerberos keys calculation
ShutdownRepo Feb 9, 2022
b098f81
Merge pull request #1 from ShutdownRepo/ntlmrelayx
n00py Feb 9, 2022
c8827b7
Adding tgssub
ShutdownRepo Feb 12, 2022
5e944b3
add alt_service parameter to fromTGS method
wqreytuk Feb 18, 2022
910386f
add support for no-pac s4u2self attack
wqreytuk Feb 18, 2022
42ce5d4
add support for no-pac s4u2self attack
wqreytuk Feb 18, 2022
ad3eeff
add alt_service parameter to from_asn1 method
wqreytuk Feb 18, 2022
125e946
add alt_service parameter to from_asn1 method
wqreytuk Feb 18, 2022
34006d9
add support for no-pac s4u2self attack
wqreytuk Feb 18, 2022
97d5d35
add support for no-pac s4u2self attack
wqreytuk Feb 18, 2022
a8402e0
add support for no-pac s4u2self attack
wqreytuk Feb 18, 2022
5ffae1e
add support for no-pac s4u2self attack
wqreytuk Feb 18, 2022
8253aed
Fixed printing of empty SQSA structures
p0dalirius Feb 18, 2022
d12bfab
Fixed printing of empty SQSA structures
p0dalirius Feb 18, 2022
aa8b81c
Merge branch 'SecureAuthCorp:master' into getST
ShutdownRepo Feb 19, 2022
bdf6c0e
Adding altservice feature
ShutdownRepo Feb 19, 2022
3e67b3d
Merge branch 'SecureAuthCorp:master' into tgssub
ShutdownRepo Feb 19, 2022
d056f09
Handling exception where ticket's service is not formatted like class…
ShutdownRepo Feb 19, 2022
533b124
Handling exception where `-altservice` is supplied when `-spn` is not
ShutdownRepo Feb 19, 2022
e93b273
update
wqreytuk Feb 19, 2022
c925ff8
Update ccache.py
wqreytuk Feb 19, 2022
dc4cb90
Update types.py
wqreytuk Feb 19, 2022
fea9812
Update getST.py
wqreytuk Feb 19, 2022
8cfd8e8
Update getST.py
wqreytuk Feb 19, 2022
5198385
Removing useless and errored statements and improving args handling
ShutdownRepo Feb 19, 2022
0beff93
Improving arguments handling
ShutdownRepo Feb 19, 2022
28f99c9
Update types.py
wqreytuk Feb 20, 2022
3b5eb31
Update ccache.py
wqreytuk Feb 20, 2022
b426cda
Update getST.py
wqreytuk Feb 20, 2022
30fa246
Update getST.py
wqreytuk Feb 20, 2022
c942baf
Update getST.py
wqreytuk Feb 20, 2022
18ed0ae
withdraw the modification to from_asn1 method
wqreytuk Feb 20, 2022
692d29c
changed with types.py
wqreytuk Feb 20, 2022
04d398f
Update ccache.py
wqreytuk Feb 20, 2022
c47a70f
Update ccache.py
wqreytuk Feb 20, 2022
526f73a
Update ccache.py
wqreytuk Feb 20, 2022
b476487
Update types.py
wqreytuk Feb 20, 2022
8450c82
Update ccache.py
wqreytuk Feb 20, 2022
7065aa8
Update getST.py
wqreytuk Feb 20, 2022
a953f54
Update getST.py
wqreytuk Feb 20, 2022
8953d05
Improved the service substitution to avoid discrepancies in the ticke…
ShutdownRepo Feb 20, 2022
5759792
Adding message informating users -spn is ignored when doing -self
ShutdownRepo Feb 20, 2022
f71c3bb
Improved the service substitution to avoid discrepancies in the ticke…
ShutdownRepo Feb 20, 2022
252ce71
Update ccache.py
wqreytuk Feb 21, 2022
9bf913a
Update types.py
wqreytuk Feb 21, 2022
ff31817
Update getTGT.py
wqreytuk Feb 21, 2022
334ac5b
Update getTGT.py
wqreytuk Feb 21, 2022
991b52a
Update getST.py
wqreytuk Feb 21, 2022
4832b97
Update getTGT.py
wqreytuk Feb 21, 2022
a4d2530
Update getTGT.py
wqreytuk Feb 21, 2022
4dc134e
remove redundant decryption
wqreytuk Feb 21, 2022
19c9dc2
Update getST.py
wqreytuk Feb 21, 2022
47db8ee
Update getST.py
wqreytuk Feb 21, 2022
9744724
Merge branch 'getST' into getTS
ShutdownRepo Feb 21, 2022
9150c94
Merge pull request #5 from wqreytuk/getTS
ShutdownRepo Feb 21, 2022
9388c65
Fixing filename definition for saveTicket
ShutdownRepo Feb 21, 2022
a01fd0e
Fixing minor logging error
ShutdownRepo Feb 21, 2022
4714c31
Adding ticket decoding and improving parsing
ShutdownRepo Feb 21, 2022
d3fdf4c
Added expired flag to endtime and renewtill times
p0dalirius Feb 21, 2022
d8d454b
Removing duplicate underscore in ccache name
ShutdownRepo Feb 22, 2022
1d4c648
[Get-GPPPassword.py] Better handling of various XML files in Group Po…
p0dalirius Feb 23, 2022
c69fcad
Better order of attributes for pretty print
p0dalirius Feb 23, 2022
5817420
A bit of code refactoring
p0dalirius Feb 25, 2022
fd76535
Reverting change to pac.py that was failing ticketer.py
ShutdownRepo Feb 25, 2022
e7caaa9
Reverting change to pac.py (forgot smth)
ShutdownRepo Feb 25, 2022
312715f
fixed -self and -spn check
wqreytuk Feb 26, 2022
1c66bc3
Update getST.py
wqreytuk Feb 26, 2022
be58521
Update getST.py
wqreytuk Feb 26, 2022
a92f296
Update getST.py
wqreytuk Feb 26, 2022
b2e2237
Update getST.py
wqreytuk Feb 26, 2022
8759e6c
fixed -spn and -self check
wqreytuk Feb 26, 2022
f31bc0a
Merge pull request #6 from wqreytuk/getST
ShutdownRepo Mar 5, 2022
5ea8507
fixed error
wqreytuk Mar 7, 2022
f53426a
Merge pull request #7 from wqreytuk/describeTicket
ShutdownRepo Mar 7, 2022
120a520
Handling missing kvno
ShutdownRepo Mar 8, 2022
6743ee8
Fixing debug message
ShutdownRepo Mar 9, 2022
094fb51
added machineAccountQuota.py
TahiTi Mar 16, 2022
05fd732
Fixing SID and UAC flags parsing
ShutdownRepo Mar 21, 2022
9fce194
LDAP attack: bypass computer creation restrictions with CVE-2021-34470
SAERXCIT Mar 14, 2022
1b3693d
Merge branch 'master' into aclattack
ShutdownRepo Mar 29, 2022
16c4dfe
Laying ground
ShutdownRepo Mar 31, 2022
c262752
adding base for DACL parsing
ShutdownRepo Mar 31, 2022
f350cdc
Read Write and Remove now work partially, GenericAll issue left to de…
ShutdownRepo Apr 1, 2022
c1a457c
Slightly improved printing and populated GUIDs
ShutdownRepo Apr 1, 2022
5a086e0
Refactored some bits, read/write/remove fully functional
ShutdownRepo Apr 1, 2022
f36db7a
Merge pull request #3 from GeisericII/patch-1
ShutdownRepo Apr 1, 2022
aa8b16e
Added backup and restore
ShutdownRepo Apr 1, 2022
ee7eb8b
Add comments, improve logging and Exception handling corrections
Apr 2, 2022
3b89ddf
Typo error
Apr 2, 2022
472101d
Improving restore logic
ShutdownRepo Apr 2, 2022
f9393e0
Adding exception for read filtering
ShutdownRepo Apr 2, 2022
4565452
Denied ACE now handled
Apr 8, 2022
75fb93e
Fixed Kerberos authentication error.
TahiTi Apr 26, 2022
6e0d471
Code refactor and addition of computer object creator info.
TahiTi Apr 26, 2022
0138ae4
Code refactor and addition of computer object creator info.
TahiTi Apr 26, 2022
6ee80f3
ccache-refactor
wqreytuk Apr 29, 2022
f93922e
Merge master for StartTLS update
SAERXCIT Apr 30, 2022
90866d4
Merge pull request #9 from wqreytuk/getST
ShutdownRepo May 2, 2022
3c666a2
Fixing incomplete access mask parsing
ShutdownRepo May 2, 2022
c720212
Fixed Kerberos authentication error.
TahiTi May 3, 2022
18fc012
[ntlmrelayx] Dump ADCS: fix case when ACE has neither "ObjectType" no…
SAERXCIT May 9, 2022
cc42f5d
[ntlmrelayx] Dump ADCS: fix issue when SID cannot be translated
SAERXCIT May 9, 2022
ed7f48b
Merge pull request #8 from TahiTi/dacledit
ShutdownRepo May 14, 2022
0c74df0
Merge pull request #10 from TahiTi/CVE-2021-42278
ShutdownRepo May 14, 2022
fe31f16
Fix principal & target arg descriptions
ShutdownRepo May 14, 2022
0d15c79
New example
ShutdownRepo May 14, 2022
3afb78c
Fixing args `-owner*` to `-new-owner*`
ShutdownRepo May 14, 2022
703b0c5
Removing debug code
ShutdownRepo May 14, 2022
5c477e7
Removing redundant debug read after write
ShutdownRepo May 14, 2022
cf5cfd0
Fixing and clarifying access masks and descriptions
ShutdownRepo May 15, 2022
1d0befb
Clarifying debug message
ShutdownRepo May 15, 2022
52c5449
Added flag to drop SSP from Net-NTLMv1 auth
Jun 26, 2022
15c4168
Description update of dacledit.py
Jul 9, 2022
866a269
Fixing logic error that was overwriting files
ShutdownRepo Jul 21, 2022
8c3904d
Fixed Logging Output
Synzack Jul 21, 2022
bdd40f4
Merge pull request #11 from Synzack/dacledit
ShutdownRepo Jul 22, 2022
4d46714
Merge branch 'SecureAuthCorp:master' into getST-u2u
ShutdownRepo Sep 7, 2022
bf19912
Adding support for S4U2self + U2U
ShutdownRepo Sep 7, 2022
bd6cde2
Removing logging tabs for uniformity with other scripts
ShutdownRepo Sep 7, 2022
9160d5f
Merge branch 'SecureAuthCorp:master' into describeTicket
ShutdownRepo Sep 7, 2022
b470075
Merge pull request #3 from ShutdownRepo/describeTicket
Dramelac Sep 7, 2022
6ab1acf
add PAC_REQUESTOR and PAC_ATTRIBUTES_INFO
Dramelac Aug 30, 2022
4ed1c52
Temporary fix RPC_SID faulty implem with LDAP_SID
Dramelac Aug 31, 2022
9d2276b
Complete UPN_DNS_INFO implementation with S Flag data
Dramelac Aug 31, 2022
20a59c0
Split UPN_DNS struct
Dramelac Aug 31, 2022
8d5a001
Handle null constructor
Dramelac Aug 31, 2022
1aaba17
Add multiline print for data array + Add a corresponding table for we…
Dramelac Sep 1, 2022
d3109e8
Add more well-known SID
Dramelac Sep 1, 2022
33466dc
Change default type behavior
Dramelac Sep 1, 2022
68a67bf
Add Groups decoded field
Dramelac Sep 1, 2022
0a5e5e1
Add credit
Dramelac Sep 7, 2022
d3e402b
Merge pull request #13 from Dramelac/update-pac
ShutdownRepo Sep 7, 2022
57b7c93
Simplifying the process a bit, and improving output
ShutdownRepo Sep 8, 2022
d8b0809
Printing ticket session key
ShutdownRepo Sep 8, 2022
1534e44
Handled SID not found in LDAP error
ShutdownRepo Sep 9, 2022
c2a5747
Merge pull request #14 from ShutdownRepo/getuserspns
ShutdownRepo Sep 14, 2022
9d4ffc2
Merge pull request #15 from ShutdownRepo/aclattack
ShutdownRepo Sep 14, 2022
7264be1
Merge pull request #17 from ShutdownRepo/describeTicket
ShutdownRepo Sep 14, 2022
77bae2b
Merge pull request #18 from ShutdownRepo/getST
ShutdownRepo Sep 14, 2022
162b28e
Merge pull request #19 from ShutdownRepo/CVE-2021-42278
ShutdownRepo Sep 14, 2022
27cf013
Merge pull request #21 from n00py/master
ShutdownRepo Sep 14, 2022
1bca37a
Merge pull request #20 from ShutdownRepo/tgssub
ShutdownRepo Sep 14, 2022
074460f
Merge pull request #23 from Dramelac/master
ShutdownRepo Sep 14, 2022
44dab4d
Merge pull request #24 from TahiTi/master
ShutdownRepo Sep 14, 2022
076a944
Merge pull request #28 from ShutdownRepo/dacledit
ShutdownRepo Sep 14, 2022
62c1d79
Merge pull request #29 from ShutdownRepo/owneredit
ShutdownRepo Sep 14, 2022
ae19209
Merge pull request #30 from snovvcrash/secretsdump-ldapfilter
ShutdownRepo Sep 14, 2022
562bad6
Merge pull request #31 from shoxxdj/master
ShutdownRepo Sep 14, 2022
5ed794f
Merge pull request #34 from ShutdownRepo/rbcd
ShutdownRepo Sep 14, 2022
80644c7
Merge pull request #35 from Mayfly277/master
ShutdownRepo Sep 14, 2022
5ff0c13
Adding -impersonate flag to ingest S4U2self+U2U TGT
ShutdownRepo Sep 14, 2022
ced113f
Find delegation
ShutdownRepo Sep 14, 2022
42290d6
Get gpppasswords scheduled tasks
ShutdownRepo Sep 14, 2022
d30981c
LDAP attack: Add DNS records to LDAP
ShutdownRepo Sep 14, 2022
2870081
Add pac ticketer
ShutdownRepo Sep 14, 2022
456289b
Added flag to drop SSP from Net-NTLMv1 auth
ShutdownRepo Sep 14, 2022
22d8dbe
Functional version
ShutdownRepo Sep 16, 2022
06ea5fd
Fix parameter merge
Dramelac Sep 20, 2022
7986263
Commenting out duration customization for sapphire
ShutdownRepo Sep 25, 2022
4817b85
Merge pull request #37 from ShutdownRepo/getST-u2u
ShutdownRepo Sep 25, 2022
2d1e373
Merge pull request #36 from Dramelac/patch-1
ShutdownRepo Sep 26, 2022
a67c44c
Merge branch 'exegol' into getST
ShutdownRepo Sep 26, 2022
6760d69
Merge pull request #38 from ShutdownRepo/getST
ShutdownRepo Sep 26, 2022
94cfcd7
Support for ASREPKerberoast
ShutdownRepo Sep 28, 2022
af7967c
Fixing undefined name 'tgs'
ShutdownRepo Sep 28, 2022
4f6ae8b
Merge pull request #39 from ShutdownRepo/getuserspns-nopreauth
ShutdownRepo Sep 28, 2022
e915faa
Typo on the argument, -preauth changed to -no-preauth
ShutdownRepo Sep 28, 2022
44c6e67
Merge pull request #40 from ShutdownRepo/getuserspns-nopreauth
ShutdownRepo Sep 28, 2022
ad99a36
Fixing args handling, -usersfile is needed if -no-preauth
ShutdownRepo Oct 10, 2022
ea8f2ef
Handling case when service is None
ShutdownRepo Oct 10, 2022
f94b47c
Merge pull request #41 from ShutdownRepo/getuserspns-nopreauth
ShutdownRepo Oct 10, 2022
2d1c46f
NTLM relay to sccm based on sccmwtf
Tw1sm Oct 12, 2022
2df82e8
Sapphire tickets
ShutdownRepo Nov 19, 2022
f2531da
Fixing messed up sapphire ticket merge
ShutdownRepo Nov 19, 2022
e104967
Revert "Fixing messed up sapphire ticket merge"
ShutdownRepo Nov 19, 2022
f741025
Merge pull request #43 from p0dalirius/get-gpppasswords-scheduled-tasks
ShutdownRepo Nov 23, 2022
42ae8b6
Merge pull request #1 from ShutdownRepo/exegol
ShutdownRepo Nov 26, 2022
6b9a526
Update setup.py
ShutdownRepo Nov 26, 2022
4965400
Merge pull request #2 from p0dalirius/get-gpppasswords-scheduled-tasks
ShutdownRepo Dec 2, 2022
f51a1e0
Update setup.py
ShutdownRepo Dec 2, 2022
1cd1a46
Update README.md
ShutdownRepo Dec 2, 2022
e49e440
Update version.py
ShutdownRepo Dec 2, 2022
e66b0e2
Merge pull request #4 from AdrianVollmer/ldap_weak_ciphers
ShutdownRepo Dec 14, 2022
9fa7dc4
Merge pull request #3 from Dramelac/psexec-custom
ShutdownRepo Dec 14, 2022
bf1c811
Changing to Fortra ownership
ShutdownRepo Dec 15, 2022
d6998ac
Add the possibility to specify inheritance in the ACE flag
Dec 15, 2022
db611e5
Explicitly indicating flags instead of hardcoded value
ShutdownRepo Dec 15, 2022
204c5b6
adding log: adminCount=1 will prevent ACE inheritance
ShutdownRepo Dec 16, 2022
5740d6d
Merge pull request #7 from ShutdownRepo/dacledit
ShutdownRepo Jan 4, 2023
e35a80c
Merge pull request #8 from SAERXCIT/ldapattack-msexchstoragegroup
ShutdownRepo Jan 10, 2023
1034bac
Merge pull request #10 from aevy-syn/secretsdump-mscache-timestamps
ShutdownRepo Jan 10, 2023
3a628fe
Merge pull request #13 from AdrianVollmer/ldap_weak_ciphers
ShutdownRepo Jan 10, 2023
e399cfb
Merge pull request #6 from clavoillotte/pr_SystemDPAPIdump
ShutdownRepo Jan 14, 2023
05e0071
Merge pull request #9 from SAERXCIT/dumpadcs-fixaceflag
ShutdownRepo Jan 14, 2023
e223412
Merge pull request #14 from Tw1sm/feature/sccm-relay
ShutdownRepo Jan 14, 2023
3e23948
Merge pull request #15 from nobbd/master
ShutdownRepo Jan 14, 2023
ae21336
Merge pull request #23 from S3cur3Th1sSh1t/Fix-Space
ShutdownRepo Jan 16, 2023
9dbad3b
Adding ThePorgs edits changelog
ShutdownRepo Jan 16, 2023
c4fa52a
Merge branch 'master' into secretsdump-sqsa-fix-empty-values
p0dalirius Jan 16, 2023
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
39 changes: 37 additions & 2 deletions ChangeLog.md
Original file line number Diff line number Diff line change
@@ -1,9 +1,44 @@
# ChangeLog

Project's main page at [www.secureauth.com](https://www.secureauth.com/labs/open-source-tools/impacket).
Project owner's main page is at www.coresecurity.com.

Complete list of changes can be found at:
https://github.com/SecureAuthCorp/impacket/commits/master
https://github.com/fortra/impacket/commits/master

## ThePorgs edits:
* [1135](https://github.com/fortra/impacket/pull/1135): **[GetUserSPNs]** Improved searchFilter for GetUserSPNs
* [1137](https://github.com/fortra/impacket/pull/1137): **[SystemDPAPIdump]** Added script example
* [1154](https://github.com/fortra/impacket/pull/1154): **[ntlmrelayx]** Unfiltered SID query when operating ACL attack
* [1184](https://github.com/fortra/impacket/pull/1184): **[findDelegation]** Added user filter on findDelegation
* [1201](https://github.com/fortra/impacket/pull/1201): **[describeTicket]** Added describeTicket
* [1202](https://github.com/fortra/impacket/pull/1202): **[getST]** Added -self, -altservice and -u2u to getST for S4U2self abuse, S4U2self+u2u, and service substitution
* [1224](https://github.com/fortra/impacket/pull/1224): **[renameMachine]** Added renameMachine
* [1253](https://github.com/fortra/impacket/pull/1253): **[ntlmrelayx]** Added LSA dump on top of SAM dump for ntlmrelayx
* [1256](https://github.com/fortra/impacket/pull/1256): **[tgssub]** Added tgssub script for service substitution
* [1267](https://github.com/fortra/impacket/pull/1267): **[Get-GPPPasswords]** Better handling of various XML files in Group Policy Preferences
* [1270](https://github.com/fortra/impacket/pull/1270): **[ticketer]** Fix ticketer duration to support default 10 hours tickets
* [1280](https://github.com/fortra/impacket/pull/1280): **[machineAccountQuota]** added machineAccountQuota
* [1288](https://github.com/fortra/impacket/pull/1288): **[ntlmrelayx]** LDAP attack: bypass computer creation restrictions with CVE-2021-34470
* [1289](https://github.com/fortra/impacket/pull/1289): **[ntlmrelayx]** LDAP attack: Add DNS records through LDAP
* [1291](https://github.com/fortra/impacket/pull/1291): **[dacledit]** New example script for DACL manipulation
* [1318](https://github.com/fortra/impacket/pull/1318): **[ntlmrelayx]** Dump ADCS: bug fixes
* [1323](https://github.com/fortra/impacket/pull/1323): **[owneredit]** New example script to change an object's owner
* [1329](https://github.com/fortra/impacket/pull/1329): **[secretsdump]** Use a custom LDAP filter during a DCSync
* [1353](https://github.com/fortra/impacket/pull/1353): **[ntlmrelayx]** add filter option
* [1360](https://github.com/fortra/impacket/pull/1360): **[smbserver]** Added flag to drop SSP from Net-NTLMv1 auth
* [1367](https://github.com/fortra/impacket/pull/1367): **[secretsdump]** Add UTC date to cached domain logon information
* [1391](https://github.com/fortra/impacket/pull/1391): **[ticketer]** Ticketer extra-pac implementation
* [1393](https://github.com/fortra/impacket/pull/1393): **[rbcd]** Handled SID not found in LDAP error
* [1397](https://github.com/fortra/impacket/pull/1397): **[mssqlclient]** commands and prompt improvements
* [1411](https://github.com/fortra/impacket/pull/1411): **[ticketer]** Sapphire tickets
* [1413](https://github.com/fortra/impacket/pull/1413): **[getST]** Support for Kerberoasting without pre-authentication and ST request through AS-REQ
* [1421](https://github.com/fortra/impacket/pull/1421): **[ntlmrelayx]** Fix leftover space in shadow credentials argument
* [1425](https://github.com/fortra/impacket/pull/1425): **[ntlmrelayx]** Add SCCM NTLM Relay Attack
* [1432](https://github.com/fortra/impacket/pull/1432): **[httprelayclient]** force NTLM auth if anonymous auth is enabled (ADCS)
* [1444](https://github.com/fortra/impacket/pull/1444): **[Get-GPPPassword]** Better handling of various XML files in Group Policy Preferences
* [1449](https://github.com/fortra/impacket/pull/1449): **[addcomputer,rbcd]** Allow weak TLS ciphers for LDAP connections
* [1450](https://github.com/fortra/impacket/pull/1450): **[PsExec]** Support for name customization using a custom binary file


## Impacket v0.10.0 (May 2022):

Expand Down
2 changes: 1 addition & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ RUN apk add --no-cache git gcc musl-dev python3-dev libffi-dev openssl-dev cargo
RUN python3 -m pip install virtualenv
RUN virtualenv -p python venv
ENV PATH="/opt/venv/bin:$PATH"
RUN git clone --depth 1 https://github.com/SecureAuthCorp/impacket.git
RUN git clone --depth 1 https://github.com/fortra/impacket.git
RUN python3 -m pip install impacket/

FROM python:3.8-alpine
Expand Down
12 changes: 6 additions & 6 deletions LICENSE
Original file line number Diff line number Diff line change
Expand Up @@ -4,15 +4,15 @@ Licencing
We provide this software under a slightly modified version of the
Apache Software License. The only changes to the document were the
replacement of "Apache" with "Impacket" and "Apache Software Foundation"
with "SecureAuth Corporation". Feel free to compare the resulting
with "Fortra". Feel free to compare the resulting
document to the official Apache license.

The `Apache Software License' is an Open Source Initiative Approved
License.


The Apache Software License, Version 1.1
Modifications by SecureAuth Corporation (see above)
Modifications by Fortra (see above)

Copyright (c) 2000 The Apache Software Foundation. All rights
reserved.
Expand All @@ -32,18 +32,18 @@ are met:
3. The end-user documentation included with the redistribution,
if any, must include the following acknowledgment:
"This product includes software developed by
SecureAuth Corporation (https://www.secureauth.com/)."
SecureAuth Corporation (https://www.secureauth.com/) and Fortra (https://www.fortra.com)."
Alternately, this acknowledgment may appear in the software itself,
if and wherever such third-party acknowledgments normally appear.

4. The names "Impacket", "SecureAuth Corporation" must
4. The names "Impacket", "SecureAuth Corporation", and "Fortra" must
not be used to endorse or promote products derived from this
software without prior written permission. For written
permission, please contact oss@secureauth.com.
permission, please reach out to https://www.coresecurity.com/about/contact.

5. Products derived from this software may not be called "Impacket",
nor may "Impacket" appear in their name, without prior written
permission of SecureAuth Corporation.
permission of Fortra.

THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
Expand Down
134 changes: 12 additions & 122 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,10 +1,15 @@
> :information_source: This is a fork specifically maintained for [The Exegol Project](https://exegol.rtfd.io/) but it can be used outside of Exegol as well. This is a fork of the official Impacket project at https://github.com/SecureAuthCorp/Impacket. It aims at being a quicker on the merge of pull requests and other community contributions. See this as a bleeding-edge version maintained by lover of Impacket.

> :warning: keep in mind this fork can be less stable than the official version at times. But we think the community is strong enough to offer fixes when issues rise. We, as maintainers of this fork, will just need to be fast enough to review and merge.

> :information_source: we are also working on a documentation project at [The Hacker Tools - Impacket](https://tools.thehacker.recipes/impacket). Feel free to contribute as well on the [GitHub repo](https://github.com/ShutdownRepo/The-Hacker-Tools).

Impacket
========

[![Latest Version](https://img.shields.io/pypi/v/impacket.svg)](https://pypi.python.org/pypi/impacket/)
[![Build and test Impacket](https://github.com/SecureAuthCorp/impacket/actions/workflows/build_and_test.yml/badge.svg)](https://github.com/SecureAuthCorp/impacket/actions/workflows/build_and_test.yml)
FORTRA. Copyright (C) 2022 Fortra. All rights reserved.

SECUREAUTH LABS. Copyright (C) 2022 SecureAuth Corporation. All rights reserved.
Impacket was originally created by [SecureAuth](https://www.secureauth.com/labs/open-source-tools/impacket), and now maintained by Fortra's Core Security.

Impacket is a collection of Python classes for working with network
protocols. Impacket is focused on providing low-level
Expand All @@ -15,105 +20,15 @@ raw data, and the object-oriented API makes it simple to work with
deep hierarchies of protocols. The library provides a set of tools
as examples of what can be done within the context of this library.

A description of some of the tools can be found at
[SecureAuth Labs' Open Source Website](https://www.secureauth.com/labs/open-source-tools/impacket).


What protocols are featured?
----------------------------

* Ethernet, Linux "Cooked" capture.
* IP, TCP, UDP, ICMP, IGMP, ARP.
* IPv4 and IPv6 Support.
* NMB and SMB1, SMB2 and SMB3 (high-level implementations).
* MSRPC version 5, over different transports: TCP, SMB/TCP, SMB/NetBIOS and HTTP.
* Plain, NTLM and Kerberos authentications, using password/hashes/tickets/keys.
* Portions/full implementation of the following MSRPC interfaces: EPM, DTYPES, LSAD, LSAT, NRPC, RRP, SAMR, SRVS, WKST, SCMR, BKRP, DHCPM, EVEN6, MGMT, SASEC, TSCH, DCOM, WMI, OXABREF, NSPI, OXNSPI.
* Portions of TDS (MSSQL) and LDAP protocol implementations.

Maintainer
==========

[<img src="https://www.secureauth.com/wp-content/uploads/2020/10/SA_Logo_Blue_Hori-web.png" width="320"/>](https://www.secureauth.com/)


Table of Contents
=================

* [Getting Impacket](#getting-impacket)
* [Setup](#setup)
* [Testing](#testing)
* [Licensing](#licensing)
* [Disclaimer](#disclaimer)
* [Contact Us](#contact-us)

Getting Impacket
================

### Latest version

* Impacket v0.10.0

[![Python versions](https://img.shields.io/pypi/pyversions/impacket.svg)](https://pypi.python.org/pypi/impacket/)

[Current and past releases](https://github.com/SecureAuthCorp/impacket/releases)

### Development version

* Impacket v0.10.1-dev (**[master branch](https://github.com/SecureAuthCorp/impacket/tree/master)**)

[![Python versions](https://img.shields.io/badge/python-3.6%20|%203.7%20|%203.8%20|%203.9-blue.svg)](https://github.com/SecureAuthCorp/impacket/tree/master)


Setup
=====

### Quick start

In order to grab the latest stable release with `pip` run:

python3 -m pip install impacket

> :information_source: This will make the Impacket library available to
your Python code, but will not provide you with the example scripts.

### Installing the library + example scripts

In order to install the library and the example scripts, download and
extract the package, and execute the following command from the
directory where the Impacket's release has been unpacked:

python3 -m pip install .

> :information_source: This will install the library into the default Python
modules path, where you can make use of the example scripts from the directory.

> :warning: Make sure the example scripts you're using are consistent with the
library version that's installed in your python environment.
We recommend using [virtual environments](https://docs.python.org/3/library/venv.html) to
make sure system-wide installations doesn't interfere with it.


### Docker Support

Build Impacket's image:

$ docker build -t "impacket:latest" .

Using Impacket's image:

$ docker run -it --rm "impacket:latest"

Testing
=======

The library leverages the [pytest](https://docs.pytest.org/) framework for organizing
and marking test cases, [tox](https://tox.readthedocs.io/) to automate the process of
running them across supported Python versions, and [coverage](https://coverage.readthedocs.io/)
to obtain coverage statistics.

A [comprehensive testing guide](TESTING.md) is available.

```
git clone https://github.com/ThePorgs/impacket
pipx install /path/to/impacket
```

Licensing
=========
Expand All @@ -123,28 +38,3 @@ the Apache Software License. See the accompanying [LICENSE](LICENSE) file for
more information.

SMBv1 and NetBIOS support based on Pysmb by Michael Teo.

Disclaimer
==========

The spirit of this Open Source initiative is to help security researchers,
and the community, speed up research and educational activities related to
the implementation of networking protocols and stacks.

The information in this repository is for research and educational purposes
and not meant to be used in production environments and/or as part
of commercial products.

If you desire to use this code or some part of it for your own uses, we
recommend applying proper security development life cycle and secure coding
practices, as well as generate and track the respective indicators of
compromise according to your needs.


Contact Us
==========

Whether you want to report a bug, send a patch, or give some suggestions
on this package, drop us a few lines at oss@secureauth.com.

For security-related questions check our [security policy](SECURITY.md).
2 changes: 1 addition & 1 deletion SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,4 +4,4 @@ Security Policy
Although this initiative is not meant to be used in productive environments,
if you consider that you have identified an issue that might affect the
security of its users, or you understand that the tool is being abused,
you can contact us at oss-security@secureauth.com.
you can contact us at https://www.coresecurity.com/about/contact.
2 changes: 1 addition & 1 deletion examples/Get-GPPPassword.py
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
#!/usr/bin/env python3
# Impacket - Collection of Python classes for working with network protocols.
#
# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
# Copyright (C) 2022 Fortra. All rights reserved.
#
# This software is provided under a slightly modified version
# of the Apache Software License. See the accompanying LICENSE file
Expand Down
2 changes: 1 addition & 1 deletion examples/GetADUsers.py
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
#!/usr/bin/env python
# Impacket - Collection of Python classes for working with network protocols.
#
# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
# Copyright (C) 2022 Fortra. All rights reserved.
#
# This software is provided under a slightly modified version
# of the Apache Software License. See the accompanying LICENSE file
Expand Down
2 changes: 1 addition & 1 deletion examples/GetNPUsers.py
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
#!/usr/bin/env python
# Impacket - Collection of Python classes for working with network protocols.
#
# SECUREAUTH LABS. Copyright (C) 2021 SecureAuth Corporation. All rights reserved.
# Copyright (C) 2022 Fortra. All rights reserved.
#
# This software is provided under a slightly modified version
# of the Apache Software License. See the accompanying LICENSE file
Expand Down
Loading