Commit Graph

17 Commits

Author SHA1 Message Date
Gabriel Gonzalez fde4265abd Adding "-dc-host" parameter to dacledit.py, owneredit.py, rbcd.py. Reintroduced SessionError:"STATUS_NOT_SUPPORTED" in function _get_machine_name now that all these examples have "-dc-host" parameter. (#1940) 2025-05-08 10:48:19 -03:00
Gabriel Gonzalez ae0ec300f8 Techdebt examples bootstrapping v2 (#1928)
* Standardized examples logger init method

* Fixing missing import

* Standardized examples init_ldap_session function #1

* Calling new shared function _ldap3_kerberos_login from example addcomputer

* Removed considering -debug in each example. Now it's handled in utils.

* Standardized EMPTY_LM_HASH in impacket.examples.utils

* Unify parse_identity function (phase 1)

* Standardized parse_identity

* Renamed "_ldap3_kerberos_login" to "ldap3_kerberos_login" (as it is called from outside)

* Standardize "logger" init in regsecrets.py

* Standardized LDAP login into a single function in utils.py:ldap_login
2025-03-26 22:58:39 -03:00
Jannik Vieten 835e17550b Fixed warnings with Python 3.12 (#1695)
* fixed SyntaxWarnings due to invalid escape sequence

* fixed DeprecationWarning since datetime.datetime.utcnow() is deprecated in Python 3.12+

* fixed DeprecationWarning since datetime.datetime.utcfromtimestamp() is deprecated in Python 3.12+
2024-10-24 09:00:11 -03:00
gabrielg5 27e7e7478d Updating copyright banner... 2024-08-28 17:52:57 -03:00
Charlie Bromberg 9eb25b3b35 Handled SID not found in LDAP error (#1393) 2024-08-15 10:14:42 -03:00
Jake 6bfe53928f Update rbcd.py (#1738)
Identified that rbcd failed with a "constrained violation" error when only using the NT hash. The solution was including the LM hash too, despite the fact that it was "blank". 
Added a line that'll set the LM hash to "aad3b435b51404eeaad3b435b51404ee" if one isn't provided.
2024-05-02 23:40:00 -03:00
Gabriel Gonzalez 9b4a139405 Updated Copyright to 2023 2023-07-31 11:48:28 -03:00
anadrianmanrique 32178de690 Merge pull request #1449 from AdrianVollmer/ldap_weak_ciphers
Allow weak TLS ciphers for LDAP connections
2023-02-03 11:19:03 -03:00
Gabriel Gonzalez 8799a1a2c4 Update file banners to reflect Fortra ownership 2022-12-14 17:28:23 -03:00
Adrian Vollmer cf9d50f56a Allow weak TLS ciphers for LDAP connections
In Python3.10, the default TLS cipher settings have been set to a more
secure level. See: https://bugs.python.org/issue43998

The change makes sense for general users, but Impacket is regularly used
to access old Windows computers that present certs signed using MD5 or
don't support anything higher than TLSv1.0. Impacket users arguably care
more about exploiting weaknesses than requiring super secure TLS
settings, so this patch lowers the cipher settings to the lowest value.
This is in line with the current behavior of not validating certificates
at all.

Note that this will not help if the TLS handshake fails due to
certificate issues until this bug is fixed in ldap3:
https://github.com/cannatag/ldap3/pull/1067
2022-12-05 15:19:10 +01:00
Shutdown 3e8b252b03 Updating arguments description 2022-05-14 12:43:57 +02:00
0xdeaddood 7a18ef5c8b About to tag a release 2022-05-04 11:33:16 -03:00
Roman Maksimov 921cc05342 remove duplicate code in rbcd.py 2021-10-30 22:33:43 +03:00
Shutdown 62b8769c3b Dup fix and file mode changed to 775 2021-10-25 17:47:21 +02:00
Shutdown 4080879f63 Update examples/rbcd.py
Co-authored-by: 0xdeaddood <56035084+0xdeaddood@users.noreply.github.com>
2021-10-22 22:00:28 +02:00
Shutdown f2eb3796a3 Small edits to allow RBCD attack from user account 2021-09-29 11:09:44 +02:00
Shutdown b08473b7a2 Added rbcd attack script 2021-06-29 17:54:21 +02:00