kerbad 0.5.0__tar.gz

kerbad-0.5.0/LICENSE

@@ -0,0 +1,86 @@
+MIT License
+
+Copyright (c) 2018 Tamas Jos (@skelsec)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+
+
+
+PAC parsing code in /protocol/external/* is taken from Impacket. License as follows:
+---------
+
+We provide this software under a slightly modified version of the
+Apache Software License. The only changes to the document were the
+replacement of "Apache" with "Impacket" and "Apache Software Foundation"
+with "Fortra". Feel free to compare the resulting
+document to the official Apache license.
+
+The `Apache Software License' is an Open Source Initiative Approved
+License.
+
+
+The Apache Software License, Version 1.1
+Modifications by Fortra (see above)
+
+Copyright (c) 2000 The Apache Software Foundation.  All rights
+reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+1. Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in
+   the documentation and/or other materials provided with the
+   distribution.
+
+3. The end-user documentation included with the redistribution,
+   if any, must include the following acknowledgment:
+      "This product includes software developed by
+       SecureAuth Corporation (https://www.secureauth.com/) and Fortra (https://www.fortra.com)."
+   Alternately, this acknowledgment may appear in the software itself,
+   if and wherever such third-party acknowledgments normally appear.
+
+4. The names "Impacket", "SecureAuth Corporation", and "Fortra" must
+   not be used to endorse or promote products derived from this
+   software without prior written permission. For written
+   permission, please reach out to https://www.coresecurity.com/about/contact.
+
+5. Products derived from this software may not be called "Impacket",
+   nor may "Impacket" appear in their name, without prior written
+   permission of Fortra.
+
+THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
+WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED.  IN NO EVENT SHALL THE APACHE SOFTWARE FOUNDATION OR
+ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
+USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
+OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGE.
+

kerbad-0.5.0/MANIFEST.in

@@ -0,0 +1,2 @@
+include LICENSE
+include README.md

kerbad-0.5.0/PKG-INFO

@@ -0,0 +1,30 @@
+Metadata-Version: 2.4
+Name: kerbad
+Version: 0.5.0
+Summary: Kerberos manipulation library in pure Python
+Home-page: https://github.com/CravateRouge/kerbad
+Author: Tamas Jos
+Author-email: info@skelsec.com
+Maintainer: Baptiste Crépin
+Maintainer-email: baptiste@cravaterouge.com
+Classifier: Programming Language :: Python :: 3.6
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.6
+License-File: LICENSE
+Requires-Dist: asn1crypto>=1.5.1
+Requires-Dist: cryptography>=44.0.2
+Requires-Dist: asysocks>=0.2.8
+Requires-Dist: unicrypto>=0.0.10
+Requires-Dist: tqdm
+Requires-Dist: six
+Dynamic: author
+Dynamic: author-email
+Dynamic: classifier
+Dynamic: home-page
+Dynamic: license-file
+Dynamic: maintainer
+Dynamic: maintainer-email
+Dynamic: requires-dist
+Dynamic: requires-python
+Dynamic: summary

kerbad-0.5.0/README.md

@@ -0,0 +1,67 @@
+# kerbad
+`kerbad` is fork of `minikerberos` a kerberos client library written in `Python>=3.6`. It is the kerberos library used for `bloodyAD`. It also comes with multiple useful examples for pentesters who wish to perform security audits on the kerberos protocol.  
+
+## Installation
+
+Install it via either cloning it from GitHub and using  
+
+```bash
+$ git clone https://github.com/CravateRouge/kerbad.git
+$ cd kerbad
+$ python3 setup.py install
+```  
+  
+or with `pip` from the Python Package Index (PyPI).
+  
+```bash
+$ pip install kerbad --user
+```
+
+Consider to use a Python virtual environment.
+
+## Information for developers
+`kerbad` library contains both asynchronous and blocking versions of the kerberos client with the same API. Besides the usual password/aes/rc4 LTK authentication methods it also supports PKINIT using `pfx` or `pem` formatted certificates as well as certificates stored in windows certificate store. 
+
+## Information for pentesters
+`kerbad` comes with examples which can be used to perform the usual pentest activities out-of-the-box without additional coding required.
+
+# Examples AKA the pentest tools
+Installing `kerbad` module via pip will automatically place all examples in the `Scripts` directory by the `setuptools` build environment. All tools named in the following way `bad<toolname>`
+
+## kerbad-getTGT
+Fetches a TGT for the given kerberos credential. The kredential must be in a standard `kerberos URL` format.
+
+## kerbad-getTGS
+Fetches an TGS ticket (TGSREP) for the given cerberos credential and SPN record.  
+SPN must be in `service/hostname@FQDN` format.
+
+## kerbad-kerberoast
+Also known as SPNRoast, this tool performs a kerberoast attack against one or multiple users, using the provided kerberos credential.
+
+## kerbad-getNTPKInit
+This tool recovers the NT hash for the user specified by the kerberos credential. This only works if PKINIT (cert based auth) is used.
+
+## kerbad-kerb23hashdecrypt
+This tool attempts to recover the user's NT hash for a list of kerberoast hashes.  
+When you performed a kerberoast attack against one or multiple users, and have a huge list of NT hashes (no password needed) this tool will check each NT hash if it can decrypt the ticket in the kerberoasted hashes.  
+Full disclosure, those are not hashes and it hurt me writing the previous sentence.  
+
+## kerbad-getS4U2self
+This tool is used when you have credentials to a machine account and would like to impersonate other users on the same machine. Machine account credential should be supplied in the `kerberos URL` format, while the user to be impersonated should be in the usual UserPrincialName format eg `username@FQDN`
+
+## kerbad-getS4U2proxy
+This tool is used when you have a machine account which has the permission to perform Kerberos Resource-based Constrained Delegation (RBCD). With this, you can impersonate users. For this to work, the machine account must be allowed to delegate on all protocols, not kerberos-only!
+
+## kerbad-ccacheroast
+Performs "Kerberoast" attack on a CCACHE file. You get back the "hashes" for all TGS tickets stored in the CCACHE file.
+
+## kerbad-ccache2kirbi
+Converts a CCACHE file to a list of `.kirbi` files.
+
+
+## kerbad-kirbi2ccache
+Converts one or more `.kirbi` files into one CCACHE file
+
+## kerbad-ccacheedit
+Command-line CCACHE file editor. It can list/delete credentials in a CCACHE file.
+

kerbad-0.5.0/kerbad/__init__.py

@@ -0,0 +1,22 @@
+import logging
+
+logger = logging.getLogger(__name__)
+logger.setLevel(logging.INFO)
+
+def getLogger():
+    logger.propagate = False
+    handler = logging.StreamHandler()
+    class SymbolFormatter(logging.Formatter):
+        LEVEL_SYMBOLS = {
+            logging.DEBUG: '[*]',
+            logging.INFO: '[+]',
+            logging.WARNING: '[!]',
+            logging.ERROR: '[-]',
+            logging.CRITICAL: '[X]',
+        }
+        def format(self, record):
+            symbol = self.LEVEL_SYMBOLS.get(record.levelno, '[?]')
+            return f"{symbol} {record.getMessage()}"
+    handler.setFormatter(SymbolFormatter())
+    logger.addHandler(handler)
+    return logger

kerbad-0.5.0/kerbad/_version.py

@@ -0,0 +1,8 @@
+
+__version__ = "0.5.0"
+__banner__ = \
+"""
+# kerbad %s 
+# Author: Tamas Jos @skelsec (skelsecprojects@gmail.com)
+# Current Maintainer: Baptiste Crépin (baptiste@cravaterouge.com)
+""" % __version__